CVE-2025-21415

Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network...

CVE-2025-21415

creationtimestamp| type| source ---|---|--- 2025-01-29 22:43:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113914060022431121 2025-01-29 23:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgw3zbfubj2r 2025-01-30 00:48:50+00:00| seen|...

CVE-2025-21415 Azure AI Face Service Elevation of Privilege Vulnerability

...

CVE-2025-21415 Azure AI Face Service Elevation of Privilege Vulnerability

...

CVE-2025-21415

CVE-2025-21415 affects Azure AI Face Service, where an authentication bypass by spoofing allows an authorized attacker to elevate privileges over a network. Public sources (NVD, MSRC) confirm a high-severity elevation-of-privilege flaw with CVSS v3.1 scores: NVD base 8.8 (C/H/I/A), Microsoft’s ve...