VYPR
← All advisories
Medium severity6.0NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026

CVE-2025-21195

CVE-2025-21195

Description

Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.

Affected products

9
  • Microsoft/Azure Service Fabric7 versions
    cpe:2.3:a:microsoft:azure_service_fabric:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microsoft:azure_service_fabric:*:*:*:*:*:*:*:*range: <10.1
    • cpe:2.3:a:microsoft:azure_service_fabric:10.1:-:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_4:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_5:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_6:*:*:*:*:*:*
  • Microsoft/Service Fabricllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 1.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.