CVE-2026-105734: Azure Local Elevation of Privilege Vulnerability

Q: Who can exploit this vulnerability?

An attacker must already be authorized on the affected Azure Local system and have local access. The attack does not require user interaction.

Q: What access does an attacker gain if exploitation succeeds?

Successful exploitation can allow the attacker to elevate privileges locally, with impacts to confidentiality, integrity, and availability rated high.

Q: Is remote exploitation possible?

The provided attack vector is local, so exploitation requires local access rather than network-based access.

Published Nov 10, 2026

Updated

Azure Local Elevation of Privilege Vulnerability

Other sources

Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft Azure Local<1.2610.2.3134

1.2610.2.3134

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.2610.2.3134

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·04:00 PM

Affected Software

CVE Published

via MITRE·06:15 PM

Data Sourced

via MITRE·06:15 PM

DescriptionSeverity

Data Sourced

via NVD·07:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker must already be authorized on the affected Azure Local system and have local access. The attack does not require user interaction.

What access does an attacker gain if exploitation succeeds?

Successful exploitation can allow the attacker to elevate privileges locally, with impacts to confidentiality, integrity, and availability rated high.

Is remote exploitation possible?

The provided attack vector is local, so exploitation requires local access rather than network-based access.

CVE-2026-105734: Azure Local Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What access does an attacker gain if exploitation succeeds?

Is remote exploitation possible?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What access does an attacker gain if exploitation succeeds?

Is remote exploitation possible?