← Database

CVE-2025-21415

CRITICAL CVSS: 9.9 Published: 2025-01-29 Modified: 2026-06-17

Description

Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Azure Ai Face Service

Weakness Type

CWE-290

References