CVE-2026-24304

Microsoft · Published January 22, 2026

9.9

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

Azure Resource Manager Elevation of Privilege Vulnerability. Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.

Affected Products

Azure Resource Manager

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C