Vulnerability · Published Aug 12, 2025 · Assigned by microsoft

CVE-2025-53781Azure Virtual Machines Information Disclosure Vulnerability

High 7.7

In plain English

A high-severity information exposure in DCadsv5-series Azure VM from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).

Severity (CVSS 3.1)7.7High

Exploit odds (30 days)1.2%top 30.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.

Affected products (as reported)

Vendor	Product	Versions
Microsoft	DCadsv5-series Azure VM	-
Microsoft	DCasv5-series Azure VM	-
Microsoft	DCedsv5-series Azure VM	-
Microsoft	DCesv5-series - Azure VM	-
Microsoft	DCesv6-series Azure VM	-
Microsoft	ECadsv5-series Azure VM	-
Microsoft	ECasv5-series Azure VM	-
Microsoft	ECedsv5-series Azure VM	-
Microsoft	ECesv5-series Azure VM	-
Microsoft	Ecesv6-series Azure VM	-
Microsoft	NCCadsH100v5-series Azure VM	-

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

References

Azure Virtual Machines Information Disclosure Vulnerability vendor-advisory, patch