CVE-2025-64657

CVE-2025-64657 is a critical stack-based buffer overflow vulnerability in Microsoft Azure Application Gateway, allowing an unauthenticated attacker to achieve remote privilege escalation over a network. With a CVSS score of 9.8, this flaw presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), community discussion indicates a potential for unauthenticated remote code execution, emphasizing the need for immediate mitigation strategies like limiting network access and monitoring traffic.