NCSC-2025-0109

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Azure

view advisory published 2025-04-08

Microsoft heeft kwetsbaarheden verholpen in diverse Azure producten.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-29819US——
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.
CVE-2025-27489US——
Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally.
CVE-2025-26628USmedium5.5—
Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally.
CVE-2025-25002USmedium5.7—
Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network.
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan