CVE-2025-24989 1

Vulnerability (CVE)

CVE-2025-24989: Microsoft Power Pages Improper Access Control Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Feb 21, 2025

Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.

Vulnerabilities & Patching