BaselineWatch
Desk

CVE-2026-110063

10.0 critical SSVC exploitation: none Published

Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.

Fix

Vendor advisories in the News 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 8

  1. StatusAwaiting Analysis → PublishedNVD modified 2026-10-27 03:55
  2. StatusPublished → Awaiting AnalysisNVD modified 2026-10-27 04:17
  3. StatusAwaiting Analysis → PublishedNVD modified 2026-10-23 17:42
  4. StatusPublished → Awaiting AnalysisNVD modified 2026-10-23 19:43
  5. StatusReceived → PublishedNVD modified 2026-10-22 22:13
  6. StatusPublished → ReceivedNVD modified 2026-10-22 23:18
  7. StatusReceived → PublishedNVD modified 2026-10-22 21:44
  8. First seenCVSS 10.0NVD modified 2026-10-22 22:18

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 1