CVE-2025-49752 Azure Bastion Elevation of Privilege Vulnerability

...

CVE-2025-49752

CVE-2025-49752 notes an Elevation of Privilege in Microsoft Azure Bastion. The vulnerability enables an authentication bypass via capture-replay attacks, with the underlying impact described as high confidentiality and integrity risk and low availability risk. Affected are Azure Bastion versions ...

CVE-2025-49752 Azure Bastion Elevation of Privilege Vulnerability

...

CVE-2025-49752

Azure Bastion Elevation of Privilege Vulnerability...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

...

CVE-2025-59245

CVE-2025-59245 is a Microsoft SharePoint Online elevation-of-privilege vulnerability. Connected sources describe the flaw as a code/ deserialization issue in SharePoint Online that could allow an attacker with network access and no user interaction to achieve high-impact permissions escalation (C...

CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

CVE-2025-64655

CVE-2025-64655 : Multiple sources corroborate an improper authorization vulnerability in the Dynamics OmniChannel SDK Storage Containers that could allow network-based privilege elevation. Affected product is the Dynamics OmniChannel SDK Storage Containers; root cause is improper authorization le...

CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

...

Azure Monitor Elevation of Privilege Vulnerability

...

Azure Application Gateway Elevation of Privilege Vulnerability

Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...

Azure Bastion Elevation of Privilege Vulnerability

...

Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...

Azure Application Gateway Elevation of Privilege Vulnerability

Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...

Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

TencentOS Server 3: .NET 6.0 (TSSA-2023:0179)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0179 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PT-2025-47641

Name of the Vulnerable Software and Affected Versions Azure Bastion versions prior to November 20, 2025 Description A critical elevation of privilege flaw impacts Azure Bastion. Attackers can potentially gain higher permissions through capture-replay attacks if the system is unpatched. This allow...

PT-2025-47642

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Online affected versions not specified Description The software contains an elevation of privilege flaw that could allow remote attackers to gain administrative control through unsafe deserialization. The flaw allows...