Microsoft Ecesv6-series Azure Vm Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Ecesv6-series Azure Vm Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-49707 — CVSS 7.9 (high): Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.
• CVE-2025-53781 — CVSS 7.7 (high): Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information…