Microsoft Fixes Crucial Azure AI Face Service Weakness with CVSS 9.9 Rating
Microsoft has rolled out updates to rectify two Critical-level security weaknesses affecting Azure AI Face Service and Microsoft Account, which might enable an unauthorized user to enhance their permissions under specific circumstances.
The vulnerabilities are outlined as follows –
The vulnerabilities are outlined as follows –
CVE-2025-21396 (CVSS rating: 7.5) – Microsoft Account Privilege Escalation Weakness
CVE-2025-21415 (CVSS rating: 9.9) – Azure AI Face Service
