Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5912 articles · 249481 vulns · 36/41 feeds (7d)
← Back to list
10.0
CVE-2026-110063PATCHED
microsoft · vm inspector for azure virtual machines

VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability

Description

Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.

Affected Products

VendorProductVersions
microsoftvm inspector for azure virtual machines-

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110063(vendor-advisory, patch)

Related News (2 articles)

Tier C
VulDB1d ago
CVE-2026-110063 | Microsoft VM Inspector for Azure Virtual Machines privileges management
→ No new info (linked only)
Tier A
Microsoft MSRC1d ago
CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110063
CWECWE-59
PublishedOct 22, 2026
Last enriched1d agov3
Tags
managed-serviceno-user-patch
Trending Score51
Source articles2
Independent2
Info Completeness8/14
Missing: title, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV
Windows Shell Security Feature Bypass Vulnerability
Trending: 131
CRITICALCVE-2026-105014
Azure Pipelines Remote Code Execution Vulnerability
Trending: 51
HIGHCVE-2026-96185
Microsoft Exchange Online Remote Code Execution Vulnerability
Trending: 39
CRITICALCVE-2026-97785
AAD App Proxy Elevation of Privilege Vulnerability
Trending: 37
CRITICALCVE-2026-83938
Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
Trending: 37

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 22, 2026
Discovered by ZDM
Oct 22, 2026
Updated: description
Oct 22, 2026
Updated: cweIds, tags
Oct 22, 2026
Patch Available
Oct 23, 2026

Version History

v3
Last enriched 1d ago
v3Tier C1d ago

Added CWE-269 (Improper Privilege Management) to complement existing CWE-59, and added tags indicating this is a managed service where users cannot apply patches themselves.

cweIdstags
via VulDB
v2Tier A1d ago

Added vulnerability title and detailed description explaining the improper link resolution vulnerability that enables privilege elevation over a network.

description
via Microsoft MSRC
v11d ago

Initial creation