High MSRC-CVE-2025-53765 1 CVE

Azure Stack Hub Information Disclosure Vulnerability

Published Aug 12, 2025 · Updated Aug 12, 2025

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
This vulnerability could disclose administrator account passwords in the logs.

Security updates
102.10.2.11 — https://learn.microsoft.com/en-us/azure-stack/operator/app-service-release-notes-2025r1?view=azs-2501&tabs=EntraID

Vulnerabilities 1

Medium 4.4

CVE-2025-53765

Azure Stack Hub Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally.

Microsoft Azure Stack Hub

Aug 12, 2025

Revision history

2025-08-12 #1
Information published.

References

CVE-2025-53765 Azure Stack Hub Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53765
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss