CVE-2024-49035

Microsoft's Partner Center had a privilege escalation vulnerability actively exploited in the wild, allowing attackers to gain elevated access to systems and data.

An improper access control flaw in Microsoft Partner Center enabled privilege escalation, potentially granting attackers unauthorized access to sensitive data and systems. DIB organizations using Partner Center services must immediately assess their exposure and apply Microsoft's provided patches. Failure to do so risks non-compliance with NIST 800-171 and potential data compromise.

Shame score — The active exploitation of a privilege escalation vulnerability in a major vendor's platform demonstrates a significant control failure and poses a substantial risk to DIB partners.