Microsoft Power Pages Elevation of Privilege Vulnerability

Summary

Vulnerabilities 1

• High 8.2
  CVE-2025-24989 Exploited

  Microsoft Power Pages Elevation of Privilege Vulnerability

  An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected cus…

  Microsoft Microsoft Power Pages
  Feb 19, 2025

  KEV Feb 21, 2025

Revision history

1. 2025-02-21 #2

   Fixed a typographical error. This is an information change only.

2. 2025-02-19 #1

   Information published.

References

• CVE-2025-24989 Microsoft Power Pages Elevation of Privilege Vulnerability - HTML
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24989
• Microsoft Exploitability Index
  https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
• Microsoft Support Lifecycle
  https://support.microsoft.com/lifecycle
• Common Vulnerability Scoring System
  https://www.first.org/cvss