Vulnerabilities fixed in Azure products

Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities are related to improper access control mechanisms, allowing authorized attackers to perform local spoofing attacks, obtain elevated privileges, reveal sensitive information and compromise the integrity of systems. This can...

CVE-2025-53793

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

CVE-2025-53793

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

CVE-2025-53765

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

CVE-2025-53765

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

CVE-2025-53793 Azure Stack Hub Information Disclosure Vulnerability

...

CVE-2025-53793

CVE-2025-53793 – Azure Stack Hub Information Disclosure : An improper authentication flaw in Azure Stack Hub allows an unauthenticated attacker to disclose information over the network. According to the CVE entry, the issue has a CVSS v3.1 base score of 7.5 (High) with Network attack vector and n...

CVE-2025-53793 Azure Stack Hub Information Disclosure Vulnerability

...

CVE-2025-53765 Azure Stack Hub Information Disclosure Vulnerability

...

CVE-2025-53765

CVE-2025-53765 (Azure Stack Hub Information Disclosure Vulnerability) affects Azure Stack Hub deployments, enabling a local attacker to disclose private personal information due to improper access control. The issue concerns local access to data on Azure Stack Hub and is characterized by informat...

CVE-2025-53765 Azure Stack Hub Information Disclosure Vulnerability

...

2025-08 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5063812)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

Azure Stack Hub Information Disclosure Vulnerability

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

Azure Stack Hub Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

Microsoft Azure Stack 安全漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft USA. The product supports building and deploying hybrid applications. A security vulnerability exists in Microsoft Azure Stack. An attacker exploiting the vulnerability could gain...

KLA86583 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure File Sync ca...

PT-2025-32860 · Microsoft · Azure Stack

Name of the Vulnerable Software and Affected Versions: Azure Stack affected versions not specified Description: Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network. Recommendations: At the moment, there is no information about a newer...

Microsoft Azure Stack 路径遍历漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft USA. The product supports building and deploying hybrid applications. A path traversal vulnerability exists in Microsoft Azure Stack. An attacker exploiting this vulnerability coul...

PT-2025-32849 · Microsoft · Azure Stack

Name of the Vulnerable Software and Affected Versions: Azure Stack affected versions not specified Description: An authorized attacker can disclose private personal information locally in Azure Stack. This allows exposure of this information to an unauthorized actor. Recommendations: At the momen...

KB5063880: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (August 2025)

The remote Windows host is missing security update 5063880 or hot patch 5063812. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. CVE-2025-53766 - Missing synchronization in Windows...