Vulnerabilities fixed in Microsoft Azure

🗓️ 11 Mar 2025 18:45:19Reported by NCSCType

Microsoft fixed Azure vulnerabilities that could allow privilege escalation or code execution; install updates.

Reporter	Title	Published	Views	Family All 80
BDU FSTEC	The vulnerability of the Command Line Interface (CLI) on the Microsoft Azure platform, which allows a hacker to increase their privileges	13 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Promptflow application development tool, related to insufficient spatial partitioning, allows a hacker to execute arbitrary code.	13 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Arc software for connecting local infrastructure lies in the lack of data cleansing measures at the management level, allowing attackers to escalate their privileges.	13 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Agent for Backup software, which is responsible for data backup, and the Azure Agent for Site Recovery software, which handles replication and disaster recovery, allows a malicious individual to elevate their privileges to a system-level level.	13 Mar 202500:00	–	bdu_fstec
Circl	CVE-2025-21199	11 Mar 202516:39	–	circl
Circl	CVE-2025-24049	11 Mar 202516:39	–	circl
Circl	CVE-2025-24986	11 Mar 202516:39	–	circl
Circl	CVE-2025-26627	11 Mar 202516:39	–	circl
CNNVD	Microsoft Azure 安全漏洞	11 Mar 202500:00	–	cnnvd
CNNVD	Microsoft Azure 命令注入漏洞	11 Mar 202500:00	–	cnnvd

Vulners

Node

microsoft azure_arcRange1.0.0–1.0.10

11 Mar 2025 18:45Current

7.4High risk

Vulners AI Score7.4

CVSS 3.18.4

EPSS0.00456

SSVC