Skip to content
OpenAdvisories
High WID-SEC-2025-0669 2 CVEs

Microsoft Azure: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Mar 31, 2025 · Updated Mar 31, 2025 · de-DE

Vendor: Microsoft Product: Azure Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um seine Privilegien zu erhöhen.

Product

Azure ist eine Cloud Computing-Plattform von Microsoft.

Vulnerabilities 2

  • High 8.3
    CVE-2025-21384

    Azure Health Bot Elevation of Privilege Vulnerability

    An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.

    Microsoft Azure Health Bot
  • High 8.1
    CVE-2025-26683

    Azure Playwright Elevation of Privilege Vulnerability

    Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure Playwright

Revision history

  1. #1

    Initiale Fassung

References