8.5
High
CVE-2025-21416 Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network
Description
Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Virtual Desktop | Versions not published |