CVE-2025-30392

creationtimestamp| type| source ---|---|--- 2025-04-30 17:21:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428064949898924 2025-04-30 19:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642482723437 2025-04-30 20:30:45+00:00| seen|...

CVE-2025-30392

CVE-2025-30392 concerns an elevation of privilege due to improper authorization in the Azure Bot Framework SDK . The vulnerability allows an unauthenticated attacker to elevate privileges over the network, as described in multiple sources (including Microsoft’s update guidance). Affected componen...