What the vulnerability does
01Description
Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally.
CVE-2025-53765
MEDIUM
CVE-2025-53765: Azure Stack Hub Information Disclosure Vulnerability
CVSS base score
4.4/10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Key dates
02Disclosure timeline
August 12, 2025
CVE published
February 13, 2026
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2026-3911 Org.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint
CVE-2024-6053 Improper access control in the clipboard synchronization feature
CVE-2025-20615 Qardio Heart Health IOS Mobile Application Exposure of Private Personal Information to an Unauthorized Actor
CVE-2023-35151 XWiki Platform may show email addresses in clear in REST results
CVE-2019-15623
