microsoft apm vulnerabilities
3 published CVEs name microsoft apm among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-46383
Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`
microsoft · apm
Medium5.5 - CVE-2026-45539
Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree
microsoft · apm
High7.4 - CVE-2026-44641
Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during install
microsoft · apm
High7.1