CVE-2025-21396

Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-21396

creationtimestamp| type| source ---|---|--- 2025-01-29 23:10:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113914167879704115 2025-01-29 23:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgw3z6parg2c 2025-01-30 01:11:55+00:00| seen|...

CVE-2025-21396 Microsoft Account Elevation of Privilege Vulnerability

...

CVE-2025-21396

CVE-2025-21396: A Microsoft Account elevation-of-privilege vulnerability caused by missing authorization could allow an unauthenticated attacker to elevate privileges over the network. Affected component is the Microsoft Account service; root cause is missing authorization checks that enable priv...