← Vulnerability feed

Vulnerability record · CVE-2025-21195 · published 8 July 2025

CVE-2025-21195: Microsoft azure service fabric link following vulnerability

Microsoft · Azure Service Fabric

Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.

6.0 CVSS 3.1 Medium EPSS 0.33% · top 76.1% CWE-59 · Link following
6.0CVSS 3.1 base score
0.33%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21195 Vendor Advisory

Track CVE-2025-21195 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2023-21531Microsoft azure service fabric improper access control vulnerabilityAzure Service Fabric Container Elevation of Privilege VulnerabilityEPSS 0.61%6.8CVE-2021-27075Microsoft azure container instances vulnerabilityAzure Virtual Machine Information Disclosure VulnerabilityEPSS 1.4%6.6CVE-2024-43480Microsoft azure service fabric heap-based buffer overflow vulnerabilityAzure Service Fabric for Linux Remote Code Execution VulnerabilityEPSS 1.1%6.5CVE-2023-36868Microsoft azure service fabric vulnerabilityAzure Service Fabric on Windows Information Disclosure VulnerabilityEPSS 0.70%4.8CVE-2022-35829Microsoft azure service fabric vulnerabilityService Fabric Explorer Spoofing VulnerabilityEPSS 20%4.7CVE-2023-23383Microsoft azure service fabric cross-site scripting vulnerabilityService Fabric Explorer Spoofing VulnerabilityEPSS 12%7.8CVE-2026-81963Windows Update Stack link-following privilege escalationWindows Update Stack resolves links improperly before accessing files, a link-following flaw (CWE-59) compounded by improper access control (CWE-284)…KEVEPSS 0.39%analysed7.8CVE-2015-5287ABRT abrt-hook-ccpp symlink privilege escalationThe abrt-hook-ccpp helper in Red Hat's Automatic Bug Reporting Tool (ABRT) before 2.7.1 follows symlinks on files with predictable names, letting a l…KEVEPSS 5.0%analysed

Source: NIST National Vulnerability Database (record CVE-2025-21195), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.