CVE-2025-59500

Microsoft · Published October 23, 2025

7.7

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure Notification Service Elevation of Privilege Vulnerability. Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

Affected Products

Azure Notification Service

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C