CVE-2026-110063: VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability

Published Oct 22, 2026

Updated

Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.

Other sources

VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability

— Microsoft

Affected Software

2 affected components

Microsoft VM Inspector for Azure Virtual Machines

Event History

Oct 22, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·09:44 PM

Data Sourced

via MITRE·09:44 PM

DescriptionSeverity

Frequently Asked Questions

Does an attacker need credentials or user interaction to exploit this issue?

No. The vulnerability is rated as exploitable over the network with low attack complexity, no privileges required, and no user interaction required.

Which deployments should be prioritized for remediation?

Prioritize systems running Microsoft VM Inspector for Azure Virtual Machines. Successful exploitation can allow an unauthorized attacker to elevate privileges and has high confidentiality, integrity, and availability impact.

CVE-2026-110063: VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

Does an attacker need credentials or user interaction to exploit this issue?

Which deployments should be prioritized for remediation?

Company

Resources

Contact

Frequently Asked Questions

Does an attacker need credentials or user interaction to exploit this issue?

Which deployments should be prioritized for remediation?