CVE-2025-53781

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.

CVSS v3 7.7 HIGH

7.7^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.1 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:microsoft:ecesv6-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:ecesv6-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:microsoft:dcesv6-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:dcesv6-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:microsoft:nccadsh100v5-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:nccadsh100v5-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:microsoft:ecedsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:ecedsv5-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:microsoft:ecesv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:ecesv5-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:microsoft:dcedsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:dcedsv5-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:microsoft:dcesv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:dcesv5-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:microsoft:ecadsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:ecadsv5-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:microsoft:ecasv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:ecasv5-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:microsoft:dcadsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:dcadsv5-series_azure_vm:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:microsoft:dcasv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:microsoft:dcasv5-series_azure_vm:-:*:*:*:*:*:*:*

History

10 Sep 2025, 14:57

Type	Values Removed	Values Added
CPE		cpe:2.3:h:microsoft:dcedsv5-series_azure_vm:-:::::::* cpe:2.3:h:microsoft:ecedsv5-series_azure_vm:-:::::::* cpe:2.3:o:microsoft:ecasv5-series_azure_vm_firmware:-:::::::* cpe:2.3:o:microsoft:dcadsv5-series_azure_vm_firmware:-:::::::* cpe:2.3:o:microsoft:ecesv5-series_azure_vm_firmware:-:::::::* cpe:2.3:h:microsoft:dcadsv5-series_azure_vm:-:::::::* cpe:2.3:h:microsoft:ecadsv5-series_azure_vm:-:::::::* cpe:2.3:h:microsoft:ecasv5-series_azure_vm:-:::::::* cpe:2.3:o:microsoft:nccadsh100v5-series_azure_vm_firmware:-:::::::* cpe:2.3:o:microsoft:ecesv6-series_azure_vm_firmware:-:::::::* cpe:2.3:o:microsoft:dcesv5-series_azure_vm_firmware:-:::::::* cpe:2.3:o:microsoft:dcesv6-series_azure_vm_firmware:-:::::::* cpe:2.3:h:microsoft:ecesv6-series_azure_vm:-:::::::* cpe:2.3:h:microsoft:dcasv5-series_azure_vm:-:::::::* cpe:2.3:h:microsoft:dcesv6-series_azure_vm:-:::::::* cpe:2.3:o:microsoft:dcedsv5-series_azure_vm_firmware:-:::::::* cpe:2.3:h:microsoft:ecesv5-series_azure_vm:-:::::::* cpe:2.3:o:microsoft:dcasv5-series_azure_vm_firmware:-:::::::* cpe:2.3:o:microsoft:ecedsv5-series_azure_vm_firmware:-:::::::* cpe:2.3:h:microsoft:nccadsh100v5-series_azure_vm:-:::::::* cpe:2.3:o:microsoft:ecadsv5-series_azure_vm_firmware:-:::::::* cpe:2.3:h:microsoft:dcesv5-series_azure_vm:-:::::::*
First Time		Microsoft nccadsh100v5-series Azure Vm Microsoft ecasv5-series Azure Vm Microsoft dcesv6-series Azure Vm Microsoft ecesv5-series Azure Vm Firmware Microsoft dcesv6-series Azure Vm Firmware Microsoft dcadsv5-series Azure Vm Microsoft dcesv5-series Azure Vm Microsoft ecedsv5-series Azure Vm Microsoft ecedsv5-series Azure Vm Firmware Microsoft ecadsv5-series Azure Vm Firmware Microsoft dcedsv5-series Azure Vm Firmware Microsoft dcedsv5-series Azure Vm Microsoft Microsoft ecadsv5-series Azure Vm Microsoft dcasv5-series Azure Vm Microsoft ecesv5-series Azure Vm Microsoft dcasv5-series Azure Vm Firmware Microsoft ecasv5-series Azure Vm Firmware Microsoft nccadsh100v5-series Azure Vm Firmware Microsoft dcesv5-series Azure Vm Firmware Microsoft ecesv6-series Azure Vm Firmware Microsoft dcadsv5-series Azure Vm Firmware Microsoft ecesv6-series Azure Vm
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781 - Vendor Advisory
CWE		NVD-CWE-noinfo

13 Aug 2025, 17:33

Type	Values Removed	Values Added
Summary		(es) La exposición de información confidencial a un actor no autorizado en Azure Virtual Machines permite que un atacante autorizado divulgue información a través de una red.

12 Aug 2025, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-12 18:15

Updated : 2025-09-10 14:57

NVD link : CVE-2025-53781

Mitre link : CVE-2025-53781

CVE.ORG link : CVE-2025-53781

JSON object : View

Products Affected

microsoft

dcadsv5-series_azure_vm
dcasv5-series_azure_vm_firmware
dcedsv5-series_azure_vm
ecesv6-series_azure_vm
ecedsv5-series_azure_vm_firmware
dcesv5-series_azure_vm_firmware
ecadsv5-series_azure_vm_firmware
ecadsv5-series_azure_vm
ecedsv5-series_azure_vm
dcesv6-series_azure_vm_firmware
ecasv5-series_azure_vm_firmware
nccadsh100v5-series_azure_vm_firmware
dcadsv5-series_azure_vm_firmware
dcasv5-series_azure_vm
ecesv5-series_azure_vm
dcedsv5-series_azure_vm_firmware
ecesv6-series_azure_vm_firmware
dcesv5-series_azure_vm
dcesv6-series_azure_vm
ecasv5-series_azure_vm
ecesv5-series_azure_vm_firmware
nccadsh100v5-series_azure_vm

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo

7.7 /10