CVE-2025-49752: Azure Bastion Elevation of Privilege Vulnerability

CVE-2025-59245: Microsoft SharePoint Online Elevation of Privilege Vulnerability

CVE-2025-64655: Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

CVE-2025-64657: Azure Application Gateway Elevation of Privilege Vulnerability

CVE-2025-64656: Application Gateway Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Headline

CVE-2025-62215: Windows Kernel Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News