NCSC-2025-0311

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Azure

view advisory published 2025-10-14

Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.

01

describes (11)

Related CVEs.

IDseverity exploitable
CVE-2025-59494US——
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-59292US——
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.
CVE-2025-59291US——
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.
CVE-2025-59285US——
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-58724US——
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-47989US——
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-59271US——
Redis Enterprise Elevation of Privilege Vulnerability
CVE-2025-59247UScritical9.8—
Azure PlayFab Elevation of Privilege Vulnerability
CVE-2025-59246US—OT elevated—
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59218US——
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-55321US——
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan