CVE-2026-47280

Microsoft · Published May 21, 2026

10.0

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

Azure Resource Manager Elevation of Privilege Vulnerability. Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Azure Resource Manager

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C