CVE-2023-36737 - Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

Back Back to CVE browser

HIGH

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

Published Oct 10, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.56%

Description

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

Affected products

Vendor Microsoft Product Azure Network Watcher VM Extension Default
n/a
- Version
  1.0.0.0
  Status
  affected
  Constraints
  <1.4.2798.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Azure Network Watcher VM Extension

n/a

Version	Status	Constraints
1.0.0.0	affected	<1.4.2798.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-59

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-40680
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36737
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-40680		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36737		vendor-advisoryPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Oct 10, 2023

Updated Apr 14, 2025

Reserved Jun 26, 2023

Link CVE-2023-36737

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-36737

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-36737

ENISA EUVD

Assigner microsoft

Published Oct 10, 2023

Updated Apr 14, 2025

Exploited since n/a

Link EUVD-2023-40680

EUVD-2023-40680