Severity
High
Analysis Summary
CVE-2025-21384 CVSS:8.3
An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.
CVE-2025-26683 CVSS:8.1
Microsoft Azure Playwright could allow a remote attacker to gain elevated privileges on the system, caused by improper authorization validation.
Impact
- Privilege Escalation
Indicators of Compromise
CVE
CVE-2025-21384
CVE-2025-26683
Affected Vendors
- Microsoft
Affected Products
- Microsoft Azure Health Bot
- Microsoft Azure Playwright
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.