CVE-2025-21188: Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

CVE-2025-21254: Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21216: Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21394: Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-21397: Microsoft Office Remote Code Execution Vulnerability

**What privileges could be gained by an attacker who successfully exploited the vulnerability?**

An attacker who successfully exploits this vulnerability could elevate their privileges to perform commands as Root in the target environment.

Headline

CVE-2025-21360: Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News