Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.
https://thehackernews.com/2025/02/microsoft-patches-critical-azure-ai.html
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21396