CVE-2025-24989 Microsoft Power Pages
Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Power Pages Improper Access Control Vulnerability
- Added
- 2025-02-21
- Federal patch deadline
- 2025-03-14
- Ransomware use
- not known