Microsoft Azure ARC

6 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-69399-Azure Arc Elevation of Privilege VulnerabilityCRITICAL 9.90.6 %
CVE-2026-70009-Azure Arc Elevation of Privilege VulnerabilityCRITICAL 9.80.5 %
CVE-2026-69555-Azure Arc Elevation of Privilege VulnerabilityCRITICAL 10.00.8 %
CVE-2026-24302-Azure Arc Elevation of Privilege VulnerabilityCRITICAL 9.81.5 %
CVE-2025-266271.0.0 – < 1.0.10Azure Arc Installer Elevation of Privilege VulnerabilityHIGH 7.00.9 %
CVE-2022-380071.0.0 – < 1.22Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege VulnerabilityHIGH 7.80.7 %