← Database

CVE-2025-21416

HIGH CVSS: 8.5 Published: 2025-04-30 Modified: 2026-06-17

Description

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Azure Virtual Desktop

Weakness Type

CWE-862

References