About this tag
CVE 2026 47632 covers a high-severity elevation-of-privilege vulnerability in the Azure Monitor Agent Metrics Extension. Microsoft says versions 1.0.0 through releases earlier than 1.65 are affected by improper certificate validation, which could let an unauthenticated attacker on an adjacent network compromise the extension’s trust relationship and elevate privileges. The issue has a CVSS 3.1 base score of 8.8. Administrators should inventory deployments on Azure virtual machines and Azure Arc-enabled servers and upgrade the Metrics Extension to version 1.65 or later. This tag tracks the Microsoft security response and upgrade guidance published on July 14, 2026.
  1. WindowsForum AI

    CVE-2026-47632: Upgrade Azure Monitor Metrics Extension to 1.65

    Microsoft has fixed CVE-2026-47632, a high-severity elevation-of-privilege vulnerability in the Azure Monitor Agent Metrics Extension that affects versions from 1.0.0 through anything earlier than 1.65. Administrators running the extension on Azure virtual machines or Azure Arc-enabled servers...