Microsoft fixes CVE-2025–21415 (CVSS 9.9) and CVE-2025–21396 flaws, addressing privilege escalation risks in Azure AI Face Service and Microsoft Account that could allow a malicious actor to escalate their privileges under certain conditions.