KLA89270 Multiple vulnerabilities in Microsoft Azure

🗓️ 14 Oct 2025 00:00:00Reported by Kaspersky LabType

kaspersky

kaspersky🔗 threats.kaspersky.com👁 10 Views

Microsoft Azure elevation of privilege flaws allow remote privilege gain; update via updates.

Reporter	Title	Published	Views	Family All 76
BDU FSTEC	The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, stems from deficiencies in the deserialization mechanism. This allows attackers to exploit their privileges.	16 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for creating and managing images of virtual machines and containers in Azure Compute Gallery lies in improper external management of file names or paths, allowing an attacker to escalate their privileges.	16 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for creating and managing images of virtual machines and containers in Azure Compute Gallery lies in improper external management of file names or paths, allowing an attacker to escalate their privileges.	16 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, relates to access control errors. This allows attackers to escalate their privileges.	20 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to access control deficiencies, which allows attackers to escalate their privileges.	22 Oct 202500:00	–	bdu_fstec
Circl	CVE-2025-47989	14 Oct 202516:13	–	circl
Circl	CVE-2025-58724	14 Oct 202516:13	–	circl
Circl	CVE-2025-59285	14 Oct 202516:13	–	circl
Circl	CVE-2025-59291	14 Oct 202516:13	–	circl
Circl	CVE-2025-59292	14 Oct 202516:13	–	circl

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59494
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59285
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59291
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58724
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47989
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59292
statistics	www.statistics.securelist.com/

16 Oct 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18.2

EPSS0.00727

SSVC

microsoft azure elevation of privilege azure monitor agent confidential azure container instances arc enabled servers azure connected machine agent azure compute gallery remote privilege gain windows update