CVE-2025-29819

—

CVSS 3.1

6.2 medium

EPSS

1%p62

Published

Apr 8, 2025 (Apr 8, 2025)

Modified

Jun 17, 2026

Description

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.

Vendors: microsoft
Products: windows admin center
Weakness: CWE-73
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.