CVE-2021-38645

A privilege escalation vulnerability in Microsoft's OMI within Azure VM Management Extensions was actively exploited in the wild.

This vulnerability allows attackers to escalate privileges on Azure VMs, potentially leading to full system compromise. DIB organizations using Azure VMs must ensure OMI is patched immediately, as unpatched systems are high-value targets for ransomware and data exfiltration. The active exploitation in the wild underscores the critical need for rapid patching and continuous vulnerability management.

Shame score — A known privilege escalation vulnerability in a widely deployed Azure component was actively exploited in the wild, indicating a failure in timely patching and leaving systems exposed to severe compromise.