Microsoft Azure Virtual Desktop — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Virtual Desktop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-21416 — CVSS 8.5 (high): Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.