CVE-2026-110063: VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
- Published by source
- 2026-10-13
- First seen by Reality Radar
- 2026-10-23
- Last verified
- 2026-10-23
Affected
- Manufacturer
- Microsoft
- Products
- Microsoft Edge (Chromium-based)
- CPE
- cpe:2.3:a:microsoft:microsoft_edge_chromium-based:*:*:*:*:*:*:*:*
Whether your exact unit is affected depends on the model, serial number and region in the official notice.
What the official notice says
Risk: Critical — Elevation of Privilege
Remedy / actions:
- Install the latest Microsoft security update
Is this affecting you?
Add what you own or use and Reality Radar will tell you when official changes match it — with evidence and next steps.
Sources
- Microsoft Security Update Guide (MSRC) Tier A · official published 2026-10-13
Evidence ledger
Every piece of evidence we store is appended to a public hash chain, so later edits are detectable. Anyone can re-verify it.
| Entry | Kind | Observed | Evidence hash | Entry hash |
|---|---|---|---|---|
| #1277 | new | 2026-10-23 | ad29d91e6346…cd3775 | 13a284f32f12…70a2d9 |
Chain head: #1479 ad3417dbc128…777bd4