Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure products. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges and gain access to sensitive data. The vulnerability with reference CVE-2025-27489 allows the malicious party, by loading a non-Microsoft DLL...

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

Windows Admin Center in Azure Portal Information Disclosure Vulnerability

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819: External Control of File Name or Path

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft USA. A security vulnerability exists in Microsoft Azure. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are affected: Windows...

KLA82407 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure Local Cluster...

PT-2025-15591 · Microsoft · Azure Portal Windows Admin Center

Name of the Vulnerable Software and Affected Versions: Azure Portal Windows Admin Center affected versions not specified Description: The issue allows an unauthorized attacker to disclose information locally due to external control of file name or path in Azure Portal Windows Admin Center...

The vulnerability of the Admin Center remote management tool for Windows operating systems allows a perpetrator to disclose sensitive information or cause service failures.

The vulnerability of the Admin Center remote management tool for Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

CVE-2024-43475 Microsoft Windows Admin Center Information Disclosure Vulnerability

...

CVE-2024-43475

CVE-2024-43475 is a Microsoft Windows Admin Center information-disclosure vulnerability. Connected sources describe a memory-corruption issue (buffer overflow) affecting Windows Admin Center-related functionality that can lead to sensitive data disclosure. CVSS details from the initial document i...

CVE-2024-43475 Microsoft Windows Admin Center Information Disclosure Vulnerability

...

EUVD-2024-40742

Microsoft Windows Admin Center Information Disclosure Vulnerability...

Microsoft Windows Admin Center Information Disclosure Vulnerability

...

PT-2024-6306 · Microsoft · Windows Admin Center +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Admin Center affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information or cause a denial of service. There is no information abou...

CVE-2024-43475: Buffer Over-read

Microsoft Windows Admin Center Information Disclosure Vulnerability...

Microsoft Windows Admin Center 安全漏洞

Microsoft Windows Admin Center is a locally deployed browser-based application from Microsoft USA. The program is primarily used to manage servers, clusters, and more. A security vulnerability exists in Microsoft Windows Admin Center. An attacker could exploit the vulnerability to obtain sensitiv...

CVE-2023-49233

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...