NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2025-21396

CVSS 3.1: 8.2 high
EPSS: <1%p51
Published: Jan 29, 2025 · Jan 29, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-21396 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.

Vendors: microsoft

Products: account

Weakness: CWE-862

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

1 story

Microsoft Patches Critical Azure AI Face Service Vulnerability with CVSS 9.9 Score

The Hacker NewsFeb 4, 05:08 UTC · Feb 4, 2025VulnerabilityCVE-2025-21396 CVE-2025-214153

60