Microsoft Microsoft Entra vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft Entra: 10 record(s), with affected versions and fixes.
CVE-2026-83941
High · 8.8
CWE-862 Sep 8, 2026
Entra ID Elevation of Privilege Vulnerability
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
CVE-2026-83711
Critical · 10.0
CWE-639 Sep 3, 2026
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62916
Critical · 9.8
CWE-288 Sep 3, 2026
Microsoft Entra ID Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-42901
Critical · 10.0
CWE-346 May 22, 2026
Microsoft Entra ID Elevation of Privilege Vulnerability
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-33843
Critical · 9.8
CWE-288 May 22, 2026
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-40379
High · 7.5
CWE-200 May 12, 2026
Azure Entra ID Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-35431
Critical · 10.0
CWE-918 Apr 23, 2026
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-24305
Critical · 9.8
CWE-285 Jan 22, 2026
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59246
Critical · 9.8
CWE-306 Oct 9, 2025
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59218
Critical · 9.6
CWE-284 Oct 9, 2025
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability