A vulnerability classified as critical has been found in Microsoft Azure AI Face Service. Affected is an unknown function. The manipulation leads to authentication bypass by spoofing.
This vulnerability is traded as CVE-2025-21415. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
This product is a managed service. This means that users are not able to maintain vulnerability countermeasures themselves.
