Cyber Posture

CVE-2025-59273

High

Published: 23 October 2025

Published
23 October 2025
Modified
28 October 2025
KEV Added
Patch
CVSS Score 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0012 30.8th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.

Security Summary

CVE-2025-59273 is an improper access control vulnerability (CWE-284) in Azure Event Grid. Published on 2025-10-23, it carries a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). The flaw stems from inadequate access controls, enabling unauthorized privilege elevation over a network.

An unauthorized attacker with network access can exploit this vulnerability with low complexity, requiring no privileges, user interaction, or special conditions. Exploitation allows the attacker to elevate privileges, leading to low-level impacts on confidentiality, integrity, and availability.

Microsoft's Security Response Center provides mitigation details in its update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59273.

Details

CWE(s)
CWE-284NVD-CWE-noinfo

Affected Products

microsoft
azure event grid
all versions

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Vulnerability enables unauthorized network-based privilege escalation via improper access control in public-facing Azure service, directly mapping to T1190 (Exploit Public-Facing Application) and T1068 (Exploitation for Privilege Escalation).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References