VULNERABILITY INTELLIGENCE

CVE-2025-21396

CVSS score9.8 CRITICAL

EPSS probability0.70%

CISA KEVNot currently listed

Published2025-01-29

Last modified2026-06-17

Description

Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.