Improper Access Control in Azure Event Grid by Microsoft

CVE-2025-59273

What is CVE-2025-59273?

A flaw in Azure Event Grid's access control mechanisms permits unauthorized users to elevate their privileges, potentially leading to unauthorized actions within a network. This vulnerability poses significant security risks, as attackers may exploit it to gain unauthorized access to sensitive resources or perform privileged operations. Ensuring proper access control measures are in place is crucial for safeguarding against such escalation of privilege threats.

References