CVE-2025-29814 describes an improper authorization vulnerability in Microsoft Partner Center, allowing an authenticated attacker to achieve privilege escalation over a network. With a CVSS score of 8.8 (High), this flaw presents a significant risk, enabling high impact to confidentiality, integrity, and availability with low attack complexity. While the vulnerability is not currently listed in CISA's KEV catalog and no public exploit intelligence (Metasploit, Nuclei, ExploitDB) is available, its high FAUCET Risk Score of 94/100 indicates a serious potential threat. There is currently no community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:partner_center:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.