Microsoft Azure Compute Gallery — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Compute Gallery, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-59291 — CVSS 8.2 (high): External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.
• CVE-2025-59292 — CVSS 8.2 (high): External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.
• CVE-2024-21424 — CVSS 6.5 (medium): Azure Compute Gallery Elevation of Privilege Vulnerability