CVE-2026-110063

LOWCVSS 10.0 · CRITICAL

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110063

Weakness type (CWE)

CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

Upwind Security MDR@UpwindMDR18h
🚨Critical - VM Inspector for Azure VMs Privilege Escalation via Link Following (CVE-2026-110063) VM Inspector for Azure Virtual Machines fails to validate symlink/junction targets before file access (CWE-59). An unauthenticated network attacker can coerce link resolution to access/overwrite protected paths and elevate privileges on the host. 👉Affected: VM Inspector for Azure Virtual Machines (versions not specified)
0000039
360 followersView on X

Explore more

Back to dashboard