CVE-2025-21396
Microsoft Account Elevation of Privilege Vulnerability
Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.
CVSS 3.1 · 8.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products