Microsoft fixed actively exploited flaw in Power Pages
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-21355 | Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network | 9.8 | 2% | ||
| CVE-2025-24989 | Access Control Bypass Enables Privilege Escalation in Microsoft Power Pages | 9.8 | 2% | KEV | KEV |
From the original article
1 min read at securityaffairs.com
Microsoft addressed a privilege escalation vulnerability in Power Pages, the flaw is actively exploited in attacks. Microsoft has addressed two critical vulnerabilities, tracked as CVE-2025-21355 (CVSS score: 8. 6) and CVE-2025-24989 (CVSS score: 8.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.