CVE-2025-53765: Azure Stack Hub Information Disclosure Vulnerability
Published Aug 12, 2025
·Updated
Azure Stack Hub Information Disclosure Vulnerability
Other sources
Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally.
— Microsoft
Affected Software
3 affected componentsFixes available
Microsoft Azure Stack Hub
All of the following
Microsoft Azure App Service On Azure Stack<102.10.2.11
Microsoft Azure Stack Hub<1.2311.1.22
Event History
Aug 12, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
CVE Published
via MITRE·05:10 PM
Data Sourced
via MITRE·05:10 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-53765?
CVE-2025-53765 is classified as a medium severity vulnerability due to the risk of unauthorized information disclosure.
2
How do I fix CVE-2025-53765?
To fix CVE-2025-53765, apply the latest security updates provided by Microsoft for Azure Stack Hub.
3
Which software is affected by CVE-2025-53765?
CVE-2025-53765 affects Microsoft Azure Stack Hub and Microsoft Azure App Service on Azure Stack.
4
Who can exploit CVE-2025-53765?
An authorized attacker with local access to Azure Stack can exploit CVE-2025-53765 to disclose private personal information.
5
What kind of information can be disclosed in CVE-2025-53765?
CVE-2025-53765 can lead to the exposure of private personal information to unauthorized actors.