CVE-2025-64656 - Azure Application Gateway Elevation of Privilege Vulnerability

Back Back to CVE browser

CRITICAL

Azure Application Gateway Elevation of Privilege Vulnerability

Published Nov 26, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.62%

Description

Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network.

Affected products

Vendor Microsoft Product Azure App Gateway Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Azure App Gateway

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64656
vendor-advisorypatchVendor Advisory

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64656		vendor-advisorypatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Nov 26, 2025

Updated Feb 26, 2026

Reserved Nov 6, 2025

Link CVE-2025-64656

CISA Vulnrichment

Updated Nov 27, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-64656

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-64656