Multiple vulnerabilities in Microsoft Azure

Description

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft Azure File Sync can be exploited remotely to gain privileges.
2. An information disclosure vulnerability in Azure Stack Hub can be exploited remotely to obtain sensitive information.
3. An information disclosure vulnerability in Azure Virtual Machines can be exploited remotely to obtain sensitive information.
4. A spoofing vulnerability in Azure Virtual Machines can be exploited remotely to spoof user interface.

Original advisories

• CVE-2025-53729

• CVE-2025-53793
• CVE-2025-53765
• CVE-2025-53781
• CVE-2025-49707

Related products

• Microsoft-Azure

CVE list

• CVE-2025-53729
  critical
• CVE-2025-53793
  critical
• CVE-2025-53765
  high
• CVE-2025-53781
  critical
• CVE-2025-49707
  high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com