Azure Resource Manager

Vendor:

First CVE: Jan 23, 2026 · Active for under a year

3
Total CVEs
More Total CVEs than 68% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
10.0
Avg CVSS
Higher Avg CVSS than 98% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Azure Resource Manager over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 23, 2026
6 months ago
Most Recent CVE
May 22, 2026
67 days ago

CVE Severity & Scoring

Azure Resource Manager3 CVEs
All CVEs352,785 CVEs
Critical
Attack Vector
Local0 (0.0%)
Network3 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (33.3%)
High0 (0.0%)
None2 (66.7%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (3 CVEs).

3 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-47280CRITICAL
Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.
May 22, 202610.041NONO
CVE-2026-42822CRITICAL
Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.
May 18, 202610.040NONO
CVE-2026-24304CRITICAL
Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.
Jan 23, 20269.934NONO
View all 3 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (3 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (3 CVEs).

Media Mentions

Signals from CVEs in this product scope (3 CVEs).

Top CNAs Publishing CVEs For Azure Resource Manager

Top CWEs

Versions

No cataloged versions.