Critical CVSS 10 EPSS 0.00705 2025-12 archive

Executive Summary

Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

Overview

10
CVSS CRITICAL
Critical
MS Severity
Not Exploited
MS Exploit Status
Not Found
MS Exploit Likelihood
Category Elevation of Privilege
Released Dec 9 2025
Last Updated Dec 9 2025
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.00705 — 0.48458 percentile

CVSS Vector

ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
None
SCOPE
Changed
Temporal Score: 8.8

EPSS Score

0.00705
probability of exploitation in the next 30 days
0.48458 percentile - updated 2026-06-20
View on FIRST.org

Affected Products

1 affected product
Product KB Article Severity Impact Restart Required
Microsoft Partner Center Critical Elevation of Privilege Unknown

Patches

1 patch
Article Type Restart
Unknown

Known Exploits

Acknowledgments

Gautam Peri