Azure Dns
Monthly
Privilege elevation in Microsoft Azure DNS lets a remote, unauthenticated attacker bypass authorization checks over the network to gain elevated permissions within the DNS service. The flaw stems from a missing authorization check (CWE-862) and carries a critical CVSS 9.8 with full confidentiality, integrity, and availability impact. No public exploit is identified at time of analysis, and EPSS estimates a modest 0.67% 30-day exploitation probability, but CISA's SSVC framework flags the issue as automatable with total technical impact.
Privilege elevation in Microsoft Azure DNS lets a remote, unauthenticated attacker bypass authorization checks over the network to gain elevated permissions within the DNS service. The flaw stems from a missing authorization check (CWE-862) and carries a critical CVSS 9.8 with full confidentiality, integrity, and availability impact. No public exploit is identified at time of analysis, and EPSS estimates a modest 0.67% 30-day exploitation probability, but CISA's SSVC framework flags the issue as automatable with total technical impact.