CVE-2025-21199

CVE-2025-21199 describes an improper privilege management vulnerability in the Microsoft Azure Agent Installer, allowing an authorized attacker to achieve local privilege escalation. With a CVSS score of 6.7 (Medium), exploitation requires low privileges and user interaction, but high attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. While there is no known active exploitation, exploit code, or KEV listing, the vulnerability has garnered minimal community discussion and media coverage, with one article mentioning it in the context of Microsoft's March 2025 Patch Tuesday.