EUVD-2025-2474

Malicious code in bioql PyPI...

Microsoft Patches Critical Azure AI Face Service Vulnerability with CVSS 9.9 Score

Microsoft has released patches to address two Critical-rated security flaws impacting Azure AI Face Service and Microsoft Account that could allow a malicious actor to escalate their privileges under certain conditions. The flaws are listed below - CVE-2025-21396 CVSS score: 7.5 - Microsoft Accou...

CVE-2025-21415

Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network...

CVE-2025-21415

CVE-2025-21415 affects Azure AI Face Service, where an authentication bypass by spoofing allows an authorized attacker to elevate privileges over a network. Public sources (NVD, MSRC) confirm a high-severity elevation-of-privilege flaw with CVSS v3.1 scores: NVD base 8.8 (C/H/I/A), Microsoft’s ve...

Azure AI Face Service Elevation of Privilege Vulnerability

Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network...

KLA79416 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure AI Face Service can be exploited remotely to gain privileges. 2. An...

Microsoft Azure AI Face Service 安全漏洞

Microsoft Azure AI Face Service is an artificial intelligence face service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Azure AI Face Service that stems from bypassing authentication through spoofing allowing an authorized attacker to elevate privileges over the...

CVE-2025-21415: Authentication Bypass by Spoofing

Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network...