Improper Access Control in Azure Event Grid by Microsoft
CVE-2025-59273

7.3HIGH

Key Information:

Vendor

Microsoft
Status
Azure Event Grid System
Vendor
CVE Published:
23 October 2025

What is CVE-2025-59273?

A flaw in Azure Event Grid's access control mechanisms permits unauthorized users to elevate their privileges, potentially leading to unauthorized actions within a network. This vulnerability poses significant security risks, as attackers may exploit it to gain unauthorized access to sensitive resources or perform privileged operations. Ensuring proper access control measures are in place is crucial for safeguarding against such escalation of privilege threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Azure Event Grid System Unknown

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.