CVE-2025-47995Medium· 6.5▾ SunlitWeak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.8%
Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.
azure_machine_learning -Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-49019High· 7.8Active Directory Certificate Services Elevation of Privilege Vulnerability
CVE-2026-88101High· 7.8Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
CVE-2026-85939Medium· 5.3Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
CVE-2026-85922High· 7.4Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-85376High· 7.8Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-85328High· 7.0Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.