CVE-2025-21415 & CVE-2025-21396: Microsoft Security Fixes

Microsoft disclosed and remediated two elevation-of-privilege vulnerabilities affecting Microsoft Account (CVE-2025-21396, CVSS 7.5) and Azure AI Face Service (CVE-2025-21415, CVSS 9.9). The Azure AI Face Service flaw has a proof-of-concept exploit that confirms exploitability and could enable privilege escalation and unauthorized access to cloud AI resources; Microsoft reports the issues have been patched with no customer action required. Organizations are advised to monitor advisories, maintain privileged access controls (PAM/Zero Trust), and use continuous monitoring to detect anomalous activity.