Skip to main content

CVE-2026-32204

Azure Monitor Agent Elevation of Privilege vulnerability

Microsoft

MSRC advisory May 12, 2026

Alert details

Source feed
Microsoft MSRC
CVE ID
CVE-2026-32204
Affected products
Azure Monitor Agent Elevation of Privilege · Microsoft Azure Monitor Agent Elevation of Privilege · Microsoft

What happened

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

What it means for your business

Azure Monitor Agent Elevation of Privilege vulnerability (CVE-2026-32204) was added to Microsoft’s security update guidance. External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.

EPSS probability

0.29%

Sources

Related briefs

Microsoft MSRC

CVE-2026-68801

Microsoft Excel Remote Code Execution vulnerability

Microsoft Excel Remote Code Execution vulnerability (CVE-2026-68801) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-64903

Microsoft Office Remote Code Execution vulnerability

Microsoft Office Remote Code Execution vulnerability (CVE-2026-64903) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-64899

Microsoft Office Information Disclosure vulnerability

Microsoft Office Information Disclosure vulnerability (CVE-2026-64899) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-58547

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege vulnerability

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege vulnerability (CVE-2026-58547) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Need help patching?

PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.