← Back to browse · API

CVE-2025-21415

Severity
CRITICAL
CVSS
9.9
EPSS
0.00923
Risk score
39.92
CISA KEV
No
PoC
No
Published
2025-01-29
Modified
2026-06-09
First seen
2026-08-07
Aliases
EUVD-2025-2474, GHSA-PW24-QQC3-7VPX
Products
Microsoft:Azure AI Face Service -
Sources
euvd EUVD-2025-2474

Description

Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network.

References