Microsoft Entra Connect vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Entra Connect: 1 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:entra_connect

CVE-2026-65673 High · 7.8 CWE-89 Aug 11, 2026

Microsoft Entra Connect Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally.