CVE-2025-53786: Exchange Hybrid Elevation of Privilege

Quick clarification before I write the full 2,000+ word article:
I couldn't find any public advisory or reliable references for CVE-2025-53782. The MSRC/Exchange incident most commonly referenced in mid‑/late‑2025 is CVE-2025-53786 (a hybrid Exchange → Entra ID elevation-of-privilege issue), which is likely what you meant — see summaries in the files I have (examples: analysis and October 2025 Exchange update notes).
Which would you like me to cover?

• Option A — Confirmed: I’ll write the requested 2,000+ word Markdown article about CVE-2025-53786 (Microsoft Exchange hybrid elevation-of-privilege), with timeline, technical root cause, attack chain, exploitability, detection/hunting, mitigations, patches, and references. (Recommended if you meant the hybrid Exchange issue.)
• Option B — Proceed as‑is: I’ll research CVE-2025-53782 on the web, verify whether it exists and gather authoritative sources (MSRC, NVD, CISA, vendor KBs) and then produce the article. This will require me to look up current online advisories first — do you want me to do that?
• Option C — You provide the MSRC link or any other source for CVE-2025-53782 and I’ll base the article on those documents.

Tell me which option you prefer (A, B, or C) and whether you want the article to include attacker PoC details (I can summarize but will avoid publishing exploit code), or to emphasise remediation and detection for operators.

---

Source: MSRC Security Update Guide - Microsoft Security Response Center