← Volver a CVEs
CVE-2025-59292
HIGH8.2
Descripcion
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.
Detalles CVE
Puntuacion CVSS v3.18.2
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vector de ataqueLOCAL
ComplejidadLOW
Privilegios requeridosHIGH
Interaccion usuarioNONE
Publicado10/14/2025
Ultima modificacion10/17/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
microsoft:azure_compute_gallery
Debilidades (CWE)
CWE-73
Referencias
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59292(secure@microsoft.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.