CVE-2025-49707 Azure Virtual Machines Spoofing Vulnerability
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2025-49707?
CVE-2025-49707 is a high-severity vulnerability in Microsoft DCadsv5-series Azure VM, published on 12 Aug 2025.
Official description
Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.
Weakness: CWE-284
Which versions are affected by CVE-2025-49707?
It affects 11 products.
Products include Microsoft Dcadsv5-Series Azure Vm Firmware, Microsoft Dcasv5-Series Azure Vm Firmware, Microsoft Dcedsv5-Series Azure Vm Firmware, Microsoft Dcesv5-Series Azure Vm Firmware, Microsoft Dcesv6-Series Azure Vm Firmware, Microsoft Ecadsv5-Series Azure Vm Firmware and 5 more.
How do I fix CVE-2025-49707?
No fix has been published for CVE-2025-49707 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-49707 being exploited?
There is no known exploitation of CVE-2025-49707 in the wild and no public exploit code.
Other vulnerabilities in Microsoft DCadsv5-series Azure VM
Sources
Also known as GHSA-7g7j-45fm-hprx.