Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-53781 (GCVE-0-2025-53781)
Vulnerability from cvelistv5 – Published: 2025-08-12 17:09 – Updated: 2026-02-13 18:54 Exclusively Hosted Service- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | DCadsv5-series Azure VM |
Affected:
-
|
|
| Microsoft | DCasv5-series Azure VM |
Affected:
-
|
|
| Microsoft | DCedsv5-series Azure VM |
Affected:
-
|
|
| Microsoft | DCesv5-series - Azure VM |
Affected:
-
|
|
| Microsoft | DCesv6-series Azure VM |
Affected:
-
|
|
| Microsoft | ECadsv5-series Azure VM |
Affected:
-
|
|
| Microsoft | ECasv5-series Azure VM |
Affected:
-
|
|
| Microsoft | ECedsv5-series Azure VM |
Affected:
-
|
|
| Microsoft | ECesv5-series Azure VM |
Affected:
-
|
|
| Microsoft | Ecesv6-series Azure VM |
Affected:
-
|
|
| Microsoft | NCCadsH100v5-series Azure VM |
Affected:
-
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-53781",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-12T19:07:30.346432Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-12T20:45:59.419Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DCadsv5-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "DCasv5-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "DCedsv5-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "DCesv5-series - Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "DCesv6-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "ECadsv5-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "ECasv5-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "ECedsv5-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "ECesv5-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "Ecesv6-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"product": "NCCadsH100v5-series Azure VM",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:DCasv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:DCadsv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:ECasv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:ECadsv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:DCesv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:DCedsv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:ECesv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:ECedsv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:NCCadsH100v5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:DCadsv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:ECadsv5_series_Azure_VM:*:*:*:*:*:*:*:*",
"versionStartIncluding": "-",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2025-08-12T07:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-13T18:54:06.951Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Azure Virtual Machines Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781"
}
],
"tags": [
"exclusively-hosted-service"
],
"title": "Azure Virtual Machines Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2025-53781",
"datePublished": "2025-08-12T17:09:51.592Z",
"dateReserved": "2025-07-09T13:25:25.502Z",
"dateUpdated": "2026-02-13T18:54:06.951Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2025-53781",
"date": "2026-05-28",
"epss": "0.01313",
"percentile": "0.80115"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2025-53781\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2025-08-12T18:15:46.473\",\"lastModified\":\"2025-09-10T14:57:05.167\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[{\"sourceIdentifier\":\"secure@microsoft.com\",\"tags\":[\"exclusively-hosted-service\"]}],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.\"},{\"lang\":\"es\",\"value\":\"La exposici\u00f3n de informaci\u00f3n confidencial a un actor no autorizado en Azure Virtual Machines permite que un atacante autorizado divulgue informaci\u00f3n a trav\u00e9s de una red.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N\",\"baseScore\":7.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.1,\"impactScore\":4.0},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:ecesv6-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F360528B-E470-4B26-BEDD-834E10022A98\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:ecesv6-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"802F7E6F-7794-4708-AD3D-C4D7C9CBC6FD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:dcesv6-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB30D696-671F-4BAF-AA9A-81321DF05D0B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:dcesv6-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"499B82AE-DA62-429C-9473-3E98A75BB877\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:nccadsh100v5-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B73B8D55-6058-49D6-B628-6401AE7A715B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:nccadsh100v5-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1AD133F8-8837-4D4A-9484-B50666285247\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:ecedsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"676B3D32-7995-4D44-A4D1-30F424AD0259\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:ecedsv5-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3E14156-6FE5-4BC9-A6B6-2DA55598DA36\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:ecesv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40B8180F-D355-4928-80F7-382A031CC284\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:ecesv5-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57C85697-1587-45AD-ACA0-2A5A214CFF09\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:dcedsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97B2457F-2A94-4731-86F3-7404290E7783\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:dcedsv5-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA5EF79F-6144-4315-8A49-7CC4BCB702AA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:dcesv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6747D5E4-DA0C-44A3-BE7C-5C35EEDC7E1E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:dcesv5-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3C1F02F-8A8E-4EF5-925F-DD4C26334276\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:ecadsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EAD8A5A-42E3-4180-90F8-FFF1A092ABDA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:ecadsv5-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6ECCA3F-BA40-4C11-98A2-DDD41B29C884\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:ecasv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"298DC11A-48DD-42D6-AA3C-EED7B0DB38BC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:ecasv5-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ACF7AFB5-6E9E-40E3-9759-B7DA0EB59158\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:dcadsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80909CA7-C2C0-435A-9DB1-9BF94B3DDC07\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:dcadsv5-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32DA45C4-CFF8-4DD5-9034-DF7BD8329910\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:dcasv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FFB3157-ADE9-4D26-84F5-82A2E3ACD920\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:microsoft:dcasv5-series_azure_vm:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8D776F2-B400-4281-A040-2763098A229A\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-53781\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-08-12T19:07:30.346432Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-08-12T19:07:31.979Z\"}}], \"cna\": {\"tags\": [\"exclusively-hosted-service\"], \"title\": \"Azure Virtual Machines Information Disclosure Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"DCadsv5-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"DCasv5-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"DCedsv5-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"DCesv5-series - Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"DCesv6-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"ECadsv5-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"ECasv5-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"ECedsv5-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"ECesv5-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Ecesv6-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"NCCadsH100v5-series Azure VM\", \"versions\": [{\"status\": \"affected\", \"version\": \"-\"}]}], \"datePublic\": \"2025-08-12T07:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781\", \"name\": \"Azure Virtual Machines Information Disclosure Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-200\", \"description\": \"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:DCasv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:DCadsv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:ECasv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:ECadsv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:DCesv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:DCedsv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:ECesv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:ECedsv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:NCCadsH100v5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:DCadsv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}, {\"criteria\": \"cpe:2.3:a:microsoft:ECadsv5_series_Azure_VM:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"-\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2026-02-13T18:54:06.951Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-53781\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-02-13T18:54:06.951Z\", \"dateReserved\": \"2025-07-09T13:25:25.502Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2025-08-12T17:09:51.592Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2025-AVI-0688
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Azure. Elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Azure | Azure File Sync v19 versions antérieures à 19.2.0.0 | ||
| Microsoft | Azure | Azure Stack Hub versions antérieures à 102.10.2.11 | ||
| Microsoft | Azure | Azure Stack Hub 2501 versions antérieures à 1.2501.1.47 | ||
| Microsoft | Azure | Azure File Sync v20 versions antérieures à 20.1.0.0 | ||
| Microsoft | Azure | Azure File Sync v18 versions antérieures à 18.3.0.0 | ||
| Microsoft | Azure | Azure Stack Hub 2406 versions antérieures à 1.2406.1.23 | ||
| Microsoft | Azure | Azure Stack Hub 2408 versions antérieures à 1.2408.1.50 | ||
| Microsoft | Azure | Microsoft SQL Server 2016 pour systèmes x64 Service Pack 3 Azure Connect Feature Pack versions antérieures à 13.0.7060.1 | ||
| Microsoft | Azure | Azure File Sync v21 versions antérieures à 21.1.0.0 |
| Title | Publication Time | Tags | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Azure File Sync v19 versions ant\u00e9rieures \u00e0 19.2.0.0",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Stack Hub versions ant\u00e9rieures \u00e0 102.10.2.11",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Stack Hub 2501 versions ant\u00e9rieures \u00e0 1.2501.1.47",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure File Sync v20 versions ant\u00e9rieures \u00e0 20.1.0.0",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure File Sync v18 versions ant\u00e9rieures \u00e0 18.3.0.0",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Stack Hub 2406 versions ant\u00e9rieures \u00e0 1.2406.1.23",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Stack Hub 2408 versions ant\u00e9rieures \u00e0 1.2408.1.50",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 Azure Connect Feature Pack versions ant\u00e9rieures \u00e0 13.0.7060.1",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure File Sync v21 versions ant\u00e9rieures \u00e0 21.1.0.0",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-53793",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53793"
},
{
"name": "CVE-2025-53727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53727"
},
{
"name": "CVE-2025-24999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24999"
},
{
"name": "CVE-2025-53729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53729"
},
{
"name": "CVE-2025-49759",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49759"
},
{
"name": "CVE-2025-53781",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53781"
},
{
"name": "CVE-2025-49707",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49707"
},
{
"name": "CVE-2025-53765",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53765"
},
{
"name": "CVE-2025-49758",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49758"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0688",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Azure. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure",
"vendor_advisories": [
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53729",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53729"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53793",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53793"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53781",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53727",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53727"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53765",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53765"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-49758",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49758"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-49759",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49759"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-49707",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49707"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-24999",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24999"
}
]
}
CERTFR-2025-AVI-0688
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Azure. Elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Azure | Azure File Sync v19 versions antérieures à 19.2.0.0 | ||
| Microsoft | Azure | Azure Stack Hub versions antérieures à 102.10.2.11 | ||
| Microsoft | Azure | Azure Stack Hub 2501 versions antérieures à 1.2501.1.47 | ||
| Microsoft | Azure | Azure File Sync v20 versions antérieures à 20.1.0.0 | ||
| Microsoft | Azure | Azure File Sync v18 versions antérieures à 18.3.0.0 | ||
| Microsoft | Azure | Azure Stack Hub 2406 versions antérieures à 1.2406.1.23 | ||
| Microsoft | Azure | Azure Stack Hub 2408 versions antérieures à 1.2408.1.50 | ||
| Microsoft | Azure | Microsoft SQL Server 2016 pour systèmes x64 Service Pack 3 Azure Connect Feature Pack versions antérieures à 13.0.7060.1 | ||
| Microsoft | Azure | Azure File Sync v21 versions antérieures à 21.1.0.0 |
| Title | Publication Time | Tags | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Azure File Sync v19 versions ant\u00e9rieures \u00e0 19.2.0.0",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Stack Hub versions ant\u00e9rieures \u00e0 102.10.2.11",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Stack Hub 2501 versions ant\u00e9rieures \u00e0 1.2501.1.47",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure File Sync v20 versions ant\u00e9rieures \u00e0 20.1.0.0",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure File Sync v18 versions ant\u00e9rieures \u00e0 18.3.0.0",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Stack Hub 2406 versions ant\u00e9rieures \u00e0 1.2406.1.23",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Stack Hub 2408 versions ant\u00e9rieures \u00e0 1.2408.1.50",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 Azure Connect Feature Pack versions ant\u00e9rieures \u00e0 13.0.7060.1",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure File Sync v21 versions ant\u00e9rieures \u00e0 21.1.0.0",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-53793",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53793"
},
{
"name": "CVE-2025-53727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53727"
},
{
"name": "CVE-2025-24999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24999"
},
{
"name": "CVE-2025-53729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53729"
},
{
"name": "CVE-2025-49759",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49759"
},
{
"name": "CVE-2025-53781",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53781"
},
{
"name": "CVE-2025-49707",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49707"
},
{
"name": "CVE-2025-53765",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53765"
},
{
"name": "CVE-2025-49758",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49758"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0688",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Azure. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure",
"vendor_advisories": [
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53729",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53729"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53793",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53793"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53781",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53727",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53727"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-53765",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53765"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-49758",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49758"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-49759",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49759"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-49707",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49707"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure CVE-2025-24999",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24999"
}
]
}
BDU:2025-10041
Vulnerability from fstec - Published: 12.08.2025{
"CVSS 2.0": "AV:N/AC:L/Au:S/C:C/I:N/A:N",
"CVSS 3.0": "AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Ecesv6-series Azure VM), - (DCesv6-series Azure VM), - (NCCadsH100v5-series Azure VM), - (ECedsv5-series Azure VM), - (ECesv5-series Azure VM), - (DCedsv5-series Azure VM), - (DCesv5-series - Azure VM), - (ECadsv5-series Azure VM), - (ECasv5-series Azure VM), - (DCadsv5-series Azure VM), - (DCasv5-series Azure VM)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.08.2025",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "20.08.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "20.08.2025",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-10041",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-53781",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ecesv6-series Azure VM, DCesv6-series Azure VM, NCCadsH100v5-series Azure VM, ECedsv5-series Azure VM, ECesv5-series Azure VM, DCedsv5-series Azure VM, DCesv5-series - Azure VM, ECadsv5-series Azure VM, ECasv5-series Azure VM, DCadsv5-series Azure VM, DCasv5-series Azure VM",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Azure VM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CWE-200)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Azure VM \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-200",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,7)"
}
FKIE_CVE-2025-53781
Vulnerability from fkie_nvd - Published: 2025-08-12 18:15 - Updated: 2025-09-10 14:576.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
| URL | Tags | ||
|---|---|---|---|
| secure@microsoft.com | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781 | Vendor Advisory |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:ecesv6-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F360528B-E470-4B26-BEDD-834E10022A98",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:ecesv6-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "802F7E6F-7794-4708-AD3D-C4D7C9CBC6FD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:dcesv6-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EB30D696-671F-4BAF-AA9A-81321DF05D0B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:dcesv6-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "499B82AE-DA62-429C-9473-3E98A75BB877",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:nccadsh100v5-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B73B8D55-6058-49D6-B628-6401AE7A715B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:nccadsh100v5-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1AD133F8-8837-4D4A-9484-B50666285247",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:ecedsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "676B3D32-7995-4D44-A4D1-30F424AD0259",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:ecedsv5-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C3E14156-6FE5-4BC9-A6B6-2DA55598DA36",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:ecesv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "40B8180F-D355-4928-80F7-382A031CC284",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:ecesv5-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "57C85697-1587-45AD-ACA0-2A5A214CFF09",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:dcedsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "97B2457F-2A94-4731-86F3-7404290E7783",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:dcedsv5-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BA5EF79F-6144-4315-8A49-7CC4BCB702AA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:dcesv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6747D5E4-DA0C-44A3-BE7C-5C35EEDC7E1E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:dcesv5-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C3C1F02F-8A8E-4EF5-925F-DD4C26334276",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:ecadsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5EAD8A5A-42E3-4180-90F8-FFF1A092ABDA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:ecadsv5-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D6ECCA3F-BA40-4C11-98A2-DDD41B29C884",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:ecasv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "298DC11A-48DD-42D6-AA3C-EED7B0DB38BC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:ecasv5-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ACF7AFB5-6E9E-40E3-9759-B7DA0EB59158",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:dcadsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "80909CA7-C2C0-435A-9DB1-9BF94B3DDC07",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:dcadsv5-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "32DA45C4-CFF8-4DD5-9034-DF7BD8329910",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:dcasv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3FFB3157-ADE9-4D26-84F5-82A2E3ACD920",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:microsoft:dcasv5-series_azure_vm:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A8D776F2-B400-4281-A040-2763098A229A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [
{
"sourceIdentifier": "secure@microsoft.com",
"tags": [
"exclusively-hosted-service"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network."
},
{
"lang": "es",
"value": "La exposici\u00f3n de informaci\u00f3n confidencial a un actor no autorizado en Azure Virtual Machines permite que un atacante autorizado divulgue informaci\u00f3n a trav\u00e9s de una red."
}
],
"id": "CVE-2025-53781",
"lastModified": "2025-09-10T14:57:05.167",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.1,
"impactScore": 4.0,
"source": "secure@microsoft.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2025-08-12T18:15:46.473",
"references": [
{
"source": "secure@microsoft.com",
"tags": [
"Vendor Advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-200"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-H84C-FV9H-7GP4
Vulnerability from github – Published: 2025-08-12 18:31 – Updated: 2025-08-12 18:31Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.
{
"affected": [],
"aliases": [
"CVE-2025-53781"
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-08-12T18:15:46Z",
"severity": "HIGH"
},
"details": "Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.",
"id": "GHSA-h84c-fv9h-7gp4",
"modified": "2025-08-12T18:31:33Z",
"published": "2025-08-12T18:31:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53781"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
MSRC_CVE-2025-53781
Vulnerability from csaf_microsoft - Published: 2025-08-12 07:00 - Updated: 2025-08-12 07:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
| DCasv5-series Azure VM | — | ||
| DCadsv5-series Azure VM | — | ||
| ECasv5-series Azure VM | — | ||
| ECadsv5-series Azure VM | — | ||
| DCesv5-series - Azure VM | — | ||
| DCedsv5-series Azure VM | — | ||
| ECesv5-series Azure VM | — | ||
| ECedsv5-series Azure VM | — | ||
| NCCadsH100v5-series Azure VM | — | ||
| DCesv6-series Azure VM | — | ||
| Ecesv6-series Azure VM | — |
{
"document": {
"acknowledgments": [
{
"names": [
"Microsoft Offensive Research \u0026amp; Security Engineering"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Not required. The vulnerability documented by this CVE requires no customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53781 Azure Virtual Machines Information Disclosure Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781"
},
{
"category": "self",
"summary": "CVE-2025-53781 Azure Virtual Machines Information Disclosure Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2025/msrc_cve-2025-53781.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "Azure Virtual Machines Information Disclosure Vulnerability",
"tracking": {
"current_release_date": "2025-08-12T07:00:00.000Z",
"generator": {
"date": "2025-09-17T17:51:59.078Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2025-53781",
"initial_release_date": "2025-08-12T07:00:00.000Z",
"revision_history": [
{
"date": "2025-08-12T07:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"category": "product_name",
"name": "DCasv5-series Azure VM",
"product": {
"name": "DCasv5-series Azure VM",
"product_id": "16796"
}
},
{
"category": "product_name",
"name": "DCadsv5-series Azure VM",
"product": {
"name": "DCadsv5-series Azure VM",
"product_id": "16797"
}
},
{
"category": "product_name",
"name": "ECasv5-series Azure VM",
"product": {
"name": "ECasv5-series Azure VM",
"product_id": "16798"
}
},
{
"category": "product_name",
"name": "ECadsv5-series Azure VM",
"product": {
"name": "ECadsv5-series Azure VM",
"product_id": "16799"
}
},
{
"category": "product_name",
"name": "DCesv5-series - Azure VM",
"product": {
"name": "DCesv5-series - Azure VM",
"product_id": "16804"
}
},
{
"category": "product_name",
"name": "DCedsv5-series Azure VM",
"product": {
"name": "DCedsv5-series Azure VM",
"product_id": "16805"
}
},
{
"category": "product_name",
"name": "ECesv5-series Azure VM",
"product": {
"name": "ECesv5-series Azure VM",
"product_id": "16806"
}
},
{
"category": "product_name",
"name": "ECedsv5-series Azure VM",
"product": {
"name": "ECedsv5-series Azure VM",
"product_id": "16807"
}
},
{
"category": "product_name",
"name": "NCCadsH100v5-series Azure VM",
"product": {
"name": "NCCadsH100v5-series Azure VM",
"product_id": "16808"
}
},
{
"category": "product_name",
"name": "Ecesv6-series Azure VM",
"product": {
"name": "Ecesv6-series Azure VM",
"product_id": "16815"
}
},
{
"category": "product_name",
"name": "DCesv6-series Azure VM",
"product": {
"name": "DCesv6-series Azure VM",
"product_id": "16814"
}
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-53781",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
},
{
"category": "faq",
"text": "This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.\nPlease see Toward greater transparency: Unveiling Cloud Service CVEs for more information.",
"title": "Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?"
}
],
"product_status": {
"fixed": [
"16796",
"16797",
"16798",
"16799",
"16804",
"16805",
"16806",
"16807",
"16808",
"16814",
"16815"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53781 Azure Virtual Machines Information Disclosure Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781"
},
{
"category": "self",
"summary": "CVE-2025-53781 Azure Virtual Machines Information Disclosure Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2025/msrc_cve-2025-53781.json"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalsScore": 0.0,
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "CHANGED",
"temporalScore": 6.7,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"16796",
"16797",
"16798",
"16799",
"16804",
"16805",
"16806",
"16807",
"16808",
"16814",
"16815"
]
}
],
"threats": [
{
"category": "impact",
"details": "Information Disclosure"
},
{
"category": "exploit_status",
"details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"
}
],
"title": "Azure Virtual Machines Information Disclosure Vulnerability"
}
]
}
NCSC-2025-0249
Vulnerability from csaf_ncscnl - Published: 2025-08-13 07:22 - Updated: 2025-08-13 07:22| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/open ai
Microsoft / Azure
|
cpe:/a:microsoft:azure:open_ai
|
vers:unknown/open ai | |
|
vers:unknown/portal
Microsoft / Azure
|
cpe:/a:microsoft:azure:portal
|
vers:unknown/portal | |
|
vers:unknown/1.0.0|<18.3.0.0
Microsoft / Azure File Sync
|
vers:unknown/1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=1.0.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.0.0.0 | ||
|
vers:unknown/>=1.0.0|<18.3.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=18.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=18.0|<18.0.0.0 | ||
|
vers:unknown/>=19.0|<19.1.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=19.0|<19.1.0.0 | ||
|
vers:unknown/>=20.0|<20.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=20.0|<20.0.0.0 | ||
|
vers:unknown/>=21.0|<21.2.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=21.0|<21.2.0.0 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v18
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v19
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v20
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v21
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure Open AI
|
cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Open AI
|
vers:unknown/n/a | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Portal
|
cpe:2.3:a:microsoft:azure_portal:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Portal
|
vers:unknown/n/a | ||
|
vers:microsoft/1.2406.1.23
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2406.1.23 | ||
|
vers:microsoft/1.2408.1.50
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2408.1.50 | ||
|
vers:microsoft/1.2501.1.47
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2501.1.47 | ||
|
vers:microsoft/102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub
|
cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/1.0.0|<102.10.2.11
Microsoft / Azure Stack Hub
|
vers:unknown/1.0.0|<102.10.2.11 | ||
|
vers:unknown/>=1.0.0|<102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:unknown/>=1.0.0|<102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub 2406
|
cpe:2.3:a:microsoft:azure_stack_hub_2406:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/open ai
Microsoft / Azure
|
cpe:/a:microsoft:azure:open_ai
|
vers:unknown/open ai | |
|
vers:unknown/portal
Microsoft / Azure
|
cpe:/a:microsoft:azure:portal
|
vers:unknown/portal | |
|
vers:unknown/1.0.0|<18.3.0.0
Microsoft / Azure File Sync
|
vers:unknown/1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=1.0.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.0.0.0 | ||
|
vers:unknown/>=1.0.0|<18.3.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=18.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=18.0|<18.0.0.0 | ||
|
vers:unknown/>=19.0|<19.1.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=19.0|<19.1.0.0 | ||
|
vers:unknown/>=20.0|<20.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=20.0|<20.0.0.0 | ||
|
vers:unknown/>=21.0|<21.2.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=21.0|<21.2.0.0 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v18
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v19
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v20
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v21
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure Open AI
|
cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Open AI
|
vers:unknown/n/a | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Portal
|
cpe:2.3:a:microsoft:azure_portal:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Portal
|
vers:unknown/n/a | ||
|
vers:microsoft/1.2406.1.23
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2406.1.23 | ||
|
vers:microsoft/1.2408.1.50
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2408.1.50 | ||
|
vers:microsoft/1.2501.1.47
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2501.1.47 | ||
|
vers:microsoft/102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub
|
cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/1.0.0|<102.10.2.11
Microsoft / Azure Stack Hub
|
vers:unknown/1.0.0|<102.10.2.11 | ||
|
vers:unknown/>=1.0.0|<102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:unknown/>=1.0.0|<102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub 2406
|
cpe:2.3:a:microsoft:azure_stack_hub_2406:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/open ai
Microsoft / Azure
|
cpe:/a:microsoft:azure:open_ai
|
vers:unknown/open ai | |
|
vers:unknown/portal
Microsoft / Azure
|
cpe:/a:microsoft:azure:portal
|
vers:unknown/portal | |
|
vers:unknown/1.0.0|<18.3.0.0
Microsoft / Azure File Sync
|
vers:unknown/1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=1.0.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.0.0.0 | ||
|
vers:unknown/>=1.0.0|<18.3.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=18.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=18.0|<18.0.0.0 | ||
|
vers:unknown/>=19.0|<19.1.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=19.0|<19.1.0.0 | ||
|
vers:unknown/>=20.0|<20.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=20.0|<20.0.0.0 | ||
|
vers:unknown/>=21.0|<21.2.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=21.0|<21.2.0.0 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v18
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v19
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v20
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v21
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure Open AI
|
cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Open AI
|
vers:unknown/n/a | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Portal
|
cpe:2.3:a:microsoft:azure_portal:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Portal
|
vers:unknown/n/a | ||
|
vers:microsoft/1.2406.1.23
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2406.1.23 | ||
|
vers:microsoft/1.2408.1.50
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2408.1.50 | ||
|
vers:microsoft/1.2501.1.47
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2501.1.47 | ||
|
vers:microsoft/102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub
|
cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/1.0.0|<102.10.2.11
Microsoft / Azure Stack Hub
|
vers:unknown/1.0.0|<102.10.2.11 | ||
|
vers:unknown/>=1.0.0|<102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:unknown/>=1.0.0|<102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub 2406
|
cpe:2.3:a:microsoft:azure_stack_hub_2406:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/open ai
Microsoft / Azure
|
cpe:/a:microsoft:azure:open_ai
|
vers:unknown/open ai | |
|
vers:unknown/portal
Microsoft / Azure
|
cpe:/a:microsoft:azure:portal
|
vers:unknown/portal | |
|
vers:unknown/1.0.0|<18.3.0.0
Microsoft / Azure File Sync
|
vers:unknown/1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=1.0.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.0.0.0 | ||
|
vers:unknown/>=1.0.0|<18.3.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=18.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=18.0|<18.0.0.0 | ||
|
vers:unknown/>=19.0|<19.1.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=19.0|<19.1.0.0 | ||
|
vers:unknown/>=20.0|<20.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=20.0|<20.0.0.0 | ||
|
vers:unknown/>=21.0|<21.2.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=21.0|<21.2.0.0 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v18
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v19
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v20
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v21
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure Open AI
|
cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Open AI
|
vers:unknown/n/a | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Portal
|
cpe:2.3:a:microsoft:azure_portal:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Portal
|
vers:unknown/n/a | ||
|
vers:microsoft/1.2406.1.23
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2406.1.23 | ||
|
vers:microsoft/1.2408.1.50
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2408.1.50 | ||
|
vers:microsoft/1.2501.1.47
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2501.1.47 | ||
|
vers:microsoft/102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub
|
cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/1.0.0|<102.10.2.11
Microsoft / Azure Stack Hub
|
vers:unknown/1.0.0|<102.10.2.11 | ||
|
vers:unknown/>=1.0.0|<102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:unknown/>=1.0.0|<102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub 2406
|
cpe:2.3:a:microsoft:azure_stack_hub_2406:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/open ai
Microsoft / Azure
|
cpe:/a:microsoft:azure:open_ai
|
vers:unknown/open ai | |
|
vers:unknown/portal
Microsoft / Azure
|
cpe:/a:microsoft:azure:portal
|
vers:unknown/portal | |
|
vers:unknown/1.0.0|<18.3.0.0
Microsoft / Azure File Sync
|
vers:unknown/1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=1.0.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.0.0.0 | ||
|
vers:unknown/>=1.0.0|<18.3.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=18.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=18.0|<18.0.0.0 | ||
|
vers:unknown/>=19.0|<19.1.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=19.0|<19.1.0.0 | ||
|
vers:unknown/>=20.0|<20.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=20.0|<20.0.0.0 | ||
|
vers:unknown/>=21.0|<21.2.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=21.0|<21.2.0.0 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v18
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v19
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v20
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v21
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure Open AI
|
cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Open AI
|
vers:unknown/n/a | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Portal
|
cpe:2.3:a:microsoft:azure_portal:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Portal
|
vers:unknown/n/a | ||
|
vers:microsoft/1.2406.1.23
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2406.1.23 | ||
|
vers:microsoft/1.2408.1.50
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2408.1.50 | ||
|
vers:microsoft/1.2501.1.47
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2501.1.47 | ||
|
vers:microsoft/102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub
|
cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/1.0.0|<102.10.2.11
Microsoft / Azure Stack Hub
|
vers:unknown/1.0.0|<102.10.2.11 | ||
|
vers:unknown/>=1.0.0|<102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:unknown/>=1.0.0|<102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub 2406
|
cpe:2.3:a:microsoft:azure_stack_hub_2406:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/open ai
Microsoft / Azure
|
cpe:/a:microsoft:azure:open_ai
|
vers:unknown/open ai | |
|
vers:unknown/portal
Microsoft / Azure
|
cpe:/a:microsoft:azure:portal
|
vers:unknown/portal | |
|
vers:unknown/1.0.0|<18.3.0.0
Microsoft / Azure File Sync
|
vers:unknown/1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=1.0.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.0.0.0 | ||
|
vers:unknown/>=1.0.0|<18.3.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=18.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=18.0|<18.0.0.0 | ||
|
vers:unknown/>=19.0|<19.1.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=19.0|<19.1.0.0 | ||
|
vers:unknown/>=20.0|<20.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=20.0|<20.0.0.0 | ||
|
vers:unknown/>=21.0|<21.2.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=21.0|<21.2.0.0 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v18
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v19
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v20
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v21
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure Open AI
|
cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Open AI
|
vers:unknown/n/a | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Portal
|
cpe:2.3:a:microsoft:azure_portal:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Portal
|
vers:unknown/n/a | ||
|
vers:microsoft/1.2406.1.23
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2406.1.23 | ||
|
vers:microsoft/1.2408.1.50
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2408.1.50 | ||
|
vers:microsoft/1.2501.1.47
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2501.1.47 | ||
|
vers:microsoft/102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub
|
cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/1.0.0|<102.10.2.11
Microsoft / Azure Stack Hub
|
vers:unknown/1.0.0|<102.10.2.11 | ||
|
vers:unknown/>=1.0.0|<102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:unknown/>=1.0.0|<102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub 2406
|
cpe:2.3:a:microsoft:azure_stack_hub_2406:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/open ai
Microsoft / Azure
|
cpe:/a:microsoft:azure:open_ai
|
vers:unknown/open ai | |
|
vers:unknown/portal
Microsoft / Azure
|
cpe:/a:microsoft:azure:portal
|
vers:unknown/portal | |
|
vers:unknown/1.0.0|<18.3.0.0
Microsoft / Azure File Sync
|
vers:unknown/1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=1.0.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.0.0.0 | ||
|
vers:unknown/>=1.0.0|<18.3.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=1.0.0|<18.3.0.0 | ||
|
vers:unknown/>=18.0|<18.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=18.0|<18.0.0.0 | ||
|
vers:unknown/>=19.0|<19.1.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=19.0|<19.1.0.0 | ||
|
vers:unknown/>=20.0|<20.0.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=20.0|<20.0.0.0 | ||
|
vers:unknown/>=21.0|<21.2.0.0
Microsoft / Microsoft / Azure File Sync
|
vers:unknown/>=21.0|<21.2.0.0 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v18
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v19
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v20
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure File Sync v21
|
cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:microsoft/unknown
Microsoft / Azure / Azure Open AI
|
cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Open AI
|
vers:unknown/n/a | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Portal
|
cpe:2.3:a:microsoft:azure_portal:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/n/a
Microsoft / Azure Portal
|
vers:unknown/n/a | ||
|
vers:microsoft/1.2406.1.23
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2406.1.23 | ||
|
vers:microsoft/1.2408.1.50
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2408.1.50 | ||
|
vers:microsoft/1.2501.1.47
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/1.2501.1.47 | ||
|
vers:microsoft/102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:microsoft/102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub
|
cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown | |
|
vers:unknown/1.0.0|<102.10.2.11
Microsoft / Azure Stack Hub
|
vers:unknown/1.0.0|<102.10.2.11 | ||
|
vers:unknown/>=1.0.0|<102.10.2.11
Microsoft / Microsoft / Azure Stack Hub
|
vers:unknown/>=1.0.0|<102.10.2.11 | ||
|
vers:microsoft/unknown
Microsoft / Azure / Azure Stack Hub 2406
|
cpe:2.3:a:microsoft:azure_stack_hub_2406:*:*:*:*:*:*:*:*
|
vers:microsoft/unknown |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Microsoft heeft kwetsbaarheden verholpen in Azure-producten.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden zijn gerelateerd aan onjuiste toegangscontrolemechanismen, waardoor geautoriseerde aanvallers lokale spoofing-aanvallen kunnen uitvoeren, verhoogde privileges kunnen verkrijgen, gevoelige informatie kunnen onthullen en de integriteit van systemen kunnen compromitteren. Dit kan leiden tot ongeautoriseerde toegang en manipulatie van gevoelige gegevens.\n```\nAzure Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53765 | 4.40 | Toegang tot gevoelige gegevens | \n| CVE-2025-53793 | 7.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nAzure OpenAI: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53767 | 10.00 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nAzure Portal: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53792 | 9.10 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nAzure Virtual Machines: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53781 | 7.70 | Toegang tot gevoelige gegevens | \n| CVE-2025-49707 | 7.90 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\nAzure File Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2025-53729 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n```",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Microsoft heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Exposure of Private Personal Information to an Unauthorized Actor",
"title": "CWE-359"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Improper Authentication",
"title": "CWE-287"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://portal.msrc.microsoft.com/en-us/security-guidance"
}
],
"title": "Kwetsbaarheden verholpen in Azure-producten",
"tracking": {
"current_release_date": "2025-08-13T07:22:17.432067Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.2"
}
},
"id": "NCSC-2025-0249",
"initial_release_date": "2025-08-13T07:22:17.432067Z",
"revision_history": [
{
"date": "2025-08-13T07:22:17.432067Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/open ai",
"product": {
"name": "vers:unknown/open ai",
"product_id": "CSAFPID-3039718",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:azure:open_ai"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/portal",
"product": {
"name": "vers:unknown/portal",
"product_id": "CSAFPID-3039717",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:azure:portal"
}
}
}
],
"category": "product_name",
"name": "Azure"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/1.0.0|\u003c18.3.0.0",
"product": {
"name": "vers:unknown/1.0.0|\u003c18.3.0.0",
"product_id": "CSAFPID-3049136"
}
}
],
"category": "product_name",
"name": "Azure File Sync"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=1.0.0|\u003c18.0.0.0",
"product": {
"name": "vers:unknown/\u003e=1.0.0|\u003c18.0.0.0",
"product_id": "CSAFPID-3049230"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=1.0.0|\u003c18.3.0.0",
"product": {
"name": "vers:unknown/\u003e=1.0.0|\u003c18.3.0.0",
"product_id": "CSAFPID-3049229"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=18.0|\u003c18.0.0.0",
"product": {
"name": "vers:unknown/\u003e=18.0|\u003c18.0.0.0",
"product_id": "CSAFPID-3048954"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=19.0|\u003c19.1.0.0",
"product": {
"name": "vers:unknown/\u003e=19.0|\u003c19.1.0.0",
"product_id": "CSAFPID-3048951"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=20.0|\u003c20.0.0.0",
"product": {
"name": "vers:unknown/\u003e=20.0|\u003c20.0.0.0",
"product_id": "CSAFPID-3048952"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=21.0|\u003c21.2.0.0",
"product": {
"name": "vers:unknown/\u003e=21.0|\u003c21.2.0.0",
"product_id": "CSAFPID-3048953"
}
}
],
"category": "product_name",
"name": "Azure File Sync"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/1.2406.1.23",
"product": {
"name": "vers:microsoft/1.2406.1.23",
"product_id": "CSAFPID-3049184"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/1.2408.1.50",
"product": {
"name": "vers:microsoft/1.2408.1.50",
"product_id": "CSAFPID-3049183"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/1.2501.1.47",
"product": {
"name": "vers:microsoft/1.2501.1.47",
"product_id": "CSAFPID-3049182"
}
},
{
"category": "product_version_range",
"name": "vers:microsoft/102.10.2.11",
"product": {
"name": "vers:microsoft/102.10.2.11",
"product_id": "CSAFPID-3049090"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=1.0.0|\u003c102.10.2.11",
"product": {
"name": "vers:unknown/\u003e=1.0.0|\u003c102.10.2.11",
"product_id": "CSAFPID-3049089"
}
}
],
"category": "product_name",
"name": "Azure Stack Hub"
}
],
"category": "product_family",
"name": "Microsoft"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-3049759",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Azure File Sync v18"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-3049760",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Azure File Sync v19"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-3049761",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Azure File Sync v20"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-3049762",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Azure File Sync v21"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-3038235",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Azure Open AI"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-3038234",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:azure_portal:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Azure Portal"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-1560226",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Azure Stack Hub"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:microsoft/unknown",
"product": {
"name": "vers:microsoft/unknown",
"product_id": "CSAFPID-3048852",
"product_identification_helper": {
"cpe": "cpe:2.3:a:microsoft:azure_stack_hub_2406:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Azure Stack Hub 2406"
}
],
"category": "product_family",
"name": "Azure"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/n/a",
"product": {
"name": "vers:unknown/n/a",
"product_id": "CSAFPID-3038148"
}
}
],
"category": "product_name",
"name": "Azure Open AI"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/n/a",
"product": {
"name": "vers:unknown/n/a",
"product_id": "CSAFPID-3038150"
}
}
],
"category": "product_name",
"name": "Azure Portal"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/1.0.0|\u003c102.10.2.11",
"product": {
"name": "vers:unknown/1.0.0|\u003c102.10.2.11",
"product_id": "CSAFPID-3048737"
}
}
],
"category": "product_name",
"name": "Azure Stack Hub"
}
],
"category": "vendor",
"name": "Microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49707",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-49707 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-49707.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.9,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
}
],
"title": "CVE-2025-49707"
},
{
"cve": "CVE-2025-53729",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53729 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53729.json"
}
],
"title": "CVE-2025-53729"
},
{
"cve": "CVE-2025-53765",
"cwe": {
"id": "CWE-359",
"name": "Exposure of Private Personal Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Private Personal Information to an Unauthorized Actor",
"title": "CWE-359"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53765 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53765.json"
}
],
"title": "CVE-2025-53765"
},
{
"cve": "CVE-2025-53767",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53767 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53767.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
}
],
"title": "CVE-2025-53767"
},
{
"cve": "CVE-2025-53781",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53781 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53781.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
}
],
"title": "CVE-2025-53781"
},
{
"cve": "CVE-2025-53792",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"notes": [
{
"category": "other",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53792 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53792.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
}
],
"title": "CVE-2025-53792"
},
{
"cve": "CVE-2025-53793",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
}
],
"product_status": {
"known_affected": [
"CSAFPID-3039718",
"CSAFPID-3039717",
"CSAFPID-3049136",
"CSAFPID-3049230",
"CSAFPID-3049229",
"CSAFPID-3048954",
"CSAFPID-3048951",
"CSAFPID-3048952",
"CSAFPID-3048953",
"CSAFPID-3049759",
"CSAFPID-3049760",
"CSAFPID-3049761",
"CSAFPID-3049762",
"CSAFPID-3038235",
"CSAFPID-3038148",
"CSAFPID-3038234",
"CSAFPID-3038150",
"CSAFPID-3049184",
"CSAFPID-3049183",
"CSAFPID-3049182",
"CSAFPID-3049090",
"CSAFPID-1560226",
"CSAFPID-3048737",
"CSAFPID-3049089",
"CSAFPID-3048852"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53793 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53793.json"
}
],
"title": "CVE-2025-53793"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.