Microsoft Entra Id vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Entra Id: 12 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:entra_id
CVE-2026-83941
High · 8.8
CWE-862 Sep 8, 2026
Entra ID Elevation of Privilege Vulnerability
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
CVE-2026-62916
Critical · 9.8
CWE-288 Sep 3, 2026
Microsoft Entra ID Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69851
Critical · 9.9
CWE-918 Aug 20, 2026
Microsoft Entra ID Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
CVE-2026-69836
Critical · 10.0
CWE-502 Aug 20, 2026
Microsoft Entra ID Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
CVE-2026-62869
High · 8.8
CWE-345 Aug 11, 2026
Azure Entra ID Spoofing Vulnerability
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
CVE-2026-42901
Critical · 10.0
CWE-346 May 22, 2026
Microsoft Entra ID Elevation of Privilege Vulnerability
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-33843
Critical · 9.8
CWE-288 May 22, 2026
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-40379
High · 7.5
CWE-200 May 12, 2026
Azure Entra ID Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-35431
Critical · 10.0
CWE-918 Apr 23, 2026
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-24305
Critical · 9.8
CWE-285 Jan 22, 2026
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59246
Critical · 9.8
CWE-306 Oct 9, 2025
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59218
Critical · 9.6
CWE-284 Oct 9, 2025
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability