← All advisories

Medium severity6.2NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026

CVE-2025-29819

CVE-2025-29819

Description

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.

Affected products

5

Microsoft/Azure Portal Windows Admin Centerllm-create
Microsoft/Windows Admin Centercpe-rescue4 versions
1809.0+ 3 more
- (no CPE)range: 1809.0
- (no CPE)range: 1.0
- cpe:2.3:a:microsoft:windows_admin_center:*:*:*:*:*:azure:*:*range: <0.45.0.0
- cpe:2.3:a:microsoft:windows_admin_center:*:*:*:*:*:*:*:*range: <2410

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29819nvdVendor Advisory

News mentions

0

No linked articles in our index yet.