Microsoft Plugs Security Leaks: Power Pages Flaw Squashed!
Microsoft patched a privilege escalation flaw in Power Pages, actively targeted by hackers. The vulnerability, CVE-2025-24989, allowed unauthorized access to elevate privileges. Affected users received cleanup guidance, while others can breathe easy—at least until the next exploit.
Hot Take:
Looks like Microsoft’s Power Pages had a bit too much power in the hands of sneaky hackers. While Bing was busy searching for vulnerabilities, Power Pages decided to open the gates for unauthorized visitors. But fear not, Microsoft has swooped in like a superhero, patching things up before more villains could exploit these digital loopholes. Talk about a Power Play!
Key Points:
- Microsoft patched two critical vulnerabilities: CVE-2025-21355 and CVE-2025-24989.
- CVE-2025-21355 affects Microsoft Bing and was reported by Nicolas Joly.
- CVE-2025-24989 involves Power Pages and allows privilege escalation.
- Raj Kumar from Microsoft reported the Power Pages flaw.
- The Power Pages vulnerability is currently being exploited in the wild.
Already a member? Log in here