CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...

CVE-2025-27489

Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...

CVE-2025-27489

Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...

CVE-2025-26628

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

CVE-2025-25002

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

CVE-2025-25002

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

CVE-2025-26628

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

CVE-2025-29819

CVE-2025-29819 affects Windows Admin Center in Azure Portal. The vulnerability is an information disclosure due to external control of a file name or path, enabling a local attacker to disclose potentially sensitive information. Root cause is described as improper handling of file paths/name inpu...

CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

...

CVE-2025-27489 Azure Local Elevation of Privilege Vulnerability

...

CVE-2025-27489 Azure Local Elevation of Privilege Vulnerability

...

CVE-2025-27489

CVE-2025-27489 is an Azure Local elevation-of-privilege vulnerability caused by improper input validation. It affects Azure Local components such as the Azure Local Cluster and the Windows VBS enclave, enabling an authorized attacker with local access to elevate privileges. Public details in conn...

CVE-2025-26628 Azure Local Cluster Information Disclosure Vulnerability

...

CVE-2025-26628

Technical details about CVE-2025-26628 are not publicly provided in the connected documents; no specific affected product versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-26628 Azure Local Cluster Information Disclosure Vulnerability

...

CVE-2025-25002 Azure Local Cluster Information Disclosure Vulnerability

...

CVE-2025-25002

CVE-2025-25002 affects Azure Local Cluster and involves insertion of sensitive information into log files, enabling an authorized attacker to disclose data over an adjacent network. The connected documents confirm the Azure Local Cluster as the vulnerable component and describe the impact as data...