CVE-2025-65041
CriticalSummary
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
Risk of privilege escalation, potentially allowing an attacker to access sensitive Partner Center functions and compromise customer data.
Recommendation
Apply patches provided by Microsoft and review user permissions in Partner Center.
Other vulnerabilities in Microsoft Partner Center
See all- CVE-2026-96207Critical
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-24303Critical
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69558High
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
- CVE-2026-34327High
A vulnerability in Microsoft Partner Center allows externally controlled references to a resource in another sphere, enabling an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS