Month: April 2025

Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-30391 Microsoft Dynamics Information Disclosure Vulnerability→

Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network. Continue reading CVE-2025-33074 Azure Functions Remote Code Execution Vulnerability→

Improper authorization in Azure allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2025-30390 Azure ML Compute Elevation of Privilege Vulnerability→

Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2025-30392 Azure AI bot Elevation of Privilege Vulnerability→

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability→

Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2025-30389 Azure Bot Framework SDK Elevation of Privilege Vulnerability→

Congratulations to the winners of the Microsoft Security Excellence Awards that recognize the innovative defenders who have gone above and beyond.

The post Microsoft announces the 2025 Security Excellence Awards winners appeared first on Microsoft Security Blog.

Continue reading Microsoft announces the 2025 Security Excellence Awards winners→

Congratulations to the winners of the Microsoft Security Excellence Awards that recognize the innovative defenders who have gone above and beyond.

The post Microsoft announces the 2025 Security Excellence Awards winners appeared first on Microsoft Security Blog.

Continue reading Microsoft announces the 2025 Security Excellence Awards winners→