CVE-2025-53762

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-53762
Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network.

8.7 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53762 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:purview:-:*:*:*:*:*:*:*
History

14 Aug 2025, 17:26

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:purview:-:*:*:*:*:*:*:*
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53762 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53762 - Vendor Advisory
First Time Microsoft purview
Microsoft

22 Jul 2025, 13:06

Type Values Removed Values Added
Summary
  • (es) La lista permisiva de entradas permitidas en Microsoft Purview permite que un atacante autorizado eleve privilegios en una red.

18 Jul 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-18 17:15

Updated : 2025-08-14 17:26

NVD link : CVE-2025-53762

Mitre link : CVE-2025-53762

CVE.ORG link : CVE-2025-53762

JSON object : View

Products Affected

microsoft

  • purview
CWE
CWE-183

Permissive List of Allowed Inputs