Analysis Summary

CVE-2025-33074 CVSS:7.5

Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network.

CVE-2025-30390 CVSS:9.9

Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.

Impact

• Code Execution
• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2025-33074

• CVE-2025-30390

Affected Vendors

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

CVE-2025-33074

CVE-2025-30390