Improper Access Control in Azure File Sync by Microsoft

CVE-2025-29973

What is CVE-2025-29973?

An improper access control vulnerability in Azure File Sync permits an authorized attacker to escalate privileges locally, potentially leading to unauthorized access and manipulation of data. This vulnerability poses significant risks if exploited, allowing the attacker to perform actions beyond their intended permissions. Organizations using Azure File Sync should ensure they implement appropriate security measures to mitigate this risk and protect their data integrity.

References