This vulnerability (CWE-502) in Azure Monitor Agent arises from improper deserialization of untrusted data, enabling an authorized attacker with local access to escalate privileges. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The affected version explicitly identified is 1.0.0. Microsoft has published an official fix and manages patching for this cloud-hosted service. The vendor advisory is available at the Microsoft Security Response Center.

Successful exploitation allows an authorized user to elevate their privileges locally within the Azure Monitor Agent environment, potentially compromising confidentiality, integrity, and availability of the system. No active exploitation in the wild has been reported.

An official fix is available from Microsoft. Because Azure Monitor is a cloud service, Microsoft manages the remediation and deployment of patches server-side. Users should verify that their Azure Monitor Agent is updated according to Microsoft's advisory to ensure protection against this vulnerability.