6.0
Medium
CVE-2025-21195 Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to…
Description
Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Service Fabric 1.0 | 1.0.0 → latest | No fix stated |
Other CVEs of Service Fabric
The 4 CVEs of Service Fabric →
CVE-2026-56642
Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a…
8.8
High
CVE-2022-30137
Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters…
6.7
Medium
CVE-2020-0902
An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka…
Not rated