Extensions are installed in Azure Windows Virtual Machine, they may make virtual machines vulnerable.
In Azure Console -
In Terraform -
References:
https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/overview
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/windows_virtual_machine#allow_extension_operations