CVE-2025-59504 HIGH

CVE-2025-59504: Azure Monitor Agent Remote Code Execution Vulnerability

Vendor Microsoft

Product Azure Monitor

Weakness CWE-122

Published November 11, 2025

Last update February 26, 2026

CVSS base score

7.3/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.

Key dates

November 11, 2025 CVE published

February 26, 2026 Record updated

External resources

Related vulnerabilities