CVE-2025-29814
CVSS 3.1 Score 9.3 of 10 (high)
Details
Summary
CVE-2025-29814 is a newly disclosed vulnerability in Microsoft Partner Center. This issue permits an attacker, who has already gained authorized access to the system, to escalate their privileges over a network. By exploiting this improper authorization weakness, the attacker can expand their control and potentially gain unauthorized access to sensitive information or perform unintended actions. Microsoft urges users to update their Partner Center environments to the latest version to mitigate this threat. This vulnerability poses a significant risk to organizations utilizing the Partner Center platform and highlights the importance of maintaining robust access control measures.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.