Remote Code Execution Vulnerability in Microsoft Purview eDiscovery

CVE-2025-64676

What is CVE-2025-64676?

A vulnerability in Microsoft Purview eDiscovery allows an authorized attacker to execute arbitrary code remotely across a network. This flaw could be exploited to gain unauthorized access to sensitive data and perform potentially harmful actions without the user's consent, thereby impacting the overall security posture of affected systems. It is vital for organizations using this product to implement appropriate security measures and stay informed about available patches to mitigate associated risks.

References