Improper Link Resolution in VM Inspector for Azure Virtual Machines
CVE-2026-110063

10CRITICAL

Key Information:

Vendor

Microsoft
Status
Vm Inspector For Azure Virtual Machines
Vendor
CVE Published:
22 October 2026

What is CVE-2026-110063?

The VM Inspector for Azure Virtual Machines is susceptible to a vulnerability that involves improper link resolution before file access, commonly referred to as 'link following.' This flaw can potentially enable an unauthorized attacker to elevate their privileges over a network, posing significant security risks for affected environments. It is essential for users to be aware of this issue and apply relevant patches to mitigate potential exploits.

Affected Version(s)

VM Inspector for Azure Virtual Machines -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.