Source |
The Hacker News |
Identifiant |
8646731 |
Date de publication |
2025-02-04 10:38:00 (vue: 2025-02-04 06:08:12) |
Titre |
Microsoft Patches Critical Azure AI Face Service Vulnerability with CVSS 9.9 Score |
Texte |
Microsoft has released patches to address two Critical-rated security flaws impacting Azure AI Face Service and Microsoft Account that could allow a malicious actor to escalate their privileges under certain conditions.
The flaws are listed below -
CVE-2025-21396 (CVSS score: 7.5) - Microsoft Account Elevation of Privilege Vulnerability
CVE-2025-21415 (CVSS score: 9.9) - Azure AI Face Service
Microsoft has released patches to address two Critical-rated security flaws impacting Azure AI Face Service and Microsoft Account that could allow a malicious actor to escalate their privileges under certain conditions.
The flaws are listed below -
CVE-2025-21396 (CVSS score: 7.5) - Microsoft Account Elevation of Privilege Vulnerability
CVE-2025-21415 (CVSS score: 9.9) - Azure AI Face Service |
Notes |
★★★
|
Envoyé |
Oui |
Condensat |
2025 21396 21415 account actor address allow are azure below certain conditions could critical cve cvss elevation escalate face flaws has impacting listed malicious microsoft patches privilege privileges rated released score score: security service two under vulnerability |
Tags |
Vulnerability
|
Stories |
|
Move |
|