Analysis Summary

CVE-2025-24049 CVSS:8.4

Microsoft Azure Command Line Integration (CLI) could allow a local attacker to gain elevated privileges on the system, caused by improper neutralization of special elements used in a command ('command injection') .

CVE-2025-24084 CVSS:8.4

Microsoft Windows could allow a local attacker to execute arbitrary code on the system, caused by untrusted pointer dereference in Windows Subsystem for Linux.

CVE-2025-24067 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a heap-based buffer overflow in Microsoft Streaming Service.

CVE-2025-29814 CVSS:9.3

Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.

CVE-2025-29807 CVSS:8.7

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.

Impact

• Privilege Escalation
• Code Execution

Indicators of Compromise

CVE

• CVE-2025-24049

• CVE-2025-24084

• CVE-2025-24067

• CVE-2025-29814

• CVE-2025-29807

Affected Vendors

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

CVE-2025-24049

CVE-2025-24084

CVE-2025-24067

CVE-2025-29814

CVE-2025-29807