Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
Fix
Vendor advisories in the News 1
- Microsoft October 2026 Security Updates: 1476 CVEs, 1 exploited, 96 critical Microsoft Security Update Guide · 2026-10-13
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 8
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-27 03:55
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-27 04:17
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-23 17:42
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-23 19:43
- StatusReceived → PublishedNVD modified 2026-10-22 22:13
- StatusPublished → ReceivedNVD modified 2026-10-22 23:18
- StatusReceived → PublishedNVD modified 2026-10-22 21:44
- First seenCVSS 10.0NVD modified 2026-10-22 22:18
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.