CVE-2025-26627 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.
High CVSS: 7.0

CVE-2025-26627

Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.
Vendor
Microsoft
Product
Azure Arc
CWE
CWE-77
Yayın Tarihi
2025-03-11 17:16:38
Güncelleme
2026-01-20 21:52:55
Source Identifier
secure@microsoft.com
KEV Date Added
-

Kategoriler

CWE-77 Azure Arc HIGH Microsoft 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26627