A high-severity access control vulnerability in select Microsoft Azure Virtual Machine series exposes systems to local spoofing risks by authenticated attackers.

The vulnerability is an improper access control flaw (CWE-284) that enables an attacker with high privileges to perform local spoofing. The attack vector is local, requiring the attacker to already possess elevated system access to exploit the machine configuration.

Successful exploitation allows an authorized attacker to perform spoofing, which can compromise the integrity of local services and data. With a CVSS score of 7.9, this vulnerability presents a significant risk to the security posture of virtualized environments, potentially leading to unauthorized data manipulation or lateral movement within the cloud infrastructure.

Immediate Action: Review the Microsoft Security Update Guide for CVE-2025-49707 and apply the relevant patches to affected Azure VM instances immediately.

Proactive Monitoring: Monitor system and access logs for suspicious activity or unauthorized configuration changes originating from high-privilege user accounts.

Compensating Controls: Implement strict identity and access management (IAM) policies to ensure that only essential personnel hold high-privilege access, thereby reducing the risk of an attacker reaching the vulnerable state.

Public Exploit Available: No (exploit_available: false)

Given the severity of this vulnerability, administrators managing the listed Azure VM series must treat this as a high-priority task. Ensure that all affected instances are identified and updated according to the official Microsoft guidance to prevent potential local exploitation.