CVE-2025-49752 - Azure Bastion Elevation of Privilege Vulnerability

CRITICAL

Azure Bastion Elevation of Privilege Vulnerability

Published Nov 20, 2025

10.0

CRITICAL

CVSS 3.1

EPSS 0.91%

Azure Bastion Elevation of Privilege Vulnerability

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints

No remediation recorded yet.

Weaknesses (1)

CWE-294

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49752		vendor-advisorypatchVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner microsoft

Published Nov 20, 2025

Updated Feb 26, 2026

Reserved Jun 9, 2025

Updated Nov 22, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a