NCSC-2025-0311

csafNLncsc_nl

NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.

Kwetsbaarheden verholpen in Microsoft Azure

Advisory ansehen veröffentlicht 2025-10-14

Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.

01

beschreibt (11)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-59494US——
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-59292US——
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.
CVE-2025-59291US——
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.
CVE-2025-59285US——
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-58724US——
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-47989US——
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-59271US——
Redis Enterprise Elevation of Privilege Vulnerability
CVE-2025-59247UScritical9.8—
Azure PlayFab Elevation of Privilege Vulnerability
CVE-2025-59246US—OT erhöht—
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59218US——
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-55321US——
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan