Vulnerabilidades do Microsoft Entra Id
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Entra Id: 7 registro(s), com versões afetadas e correções.cpe:2.3:a:microsoft:entra_id
CVE-2026-42901
Crítica · 10.0
CWE-346 22/05/2026
Microsoft Entra ID Elevation of Privilege Vulnerability
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-33843
Crítica · 9.8
CWE-288 22/05/2026
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-40379
Alta · 7.5
CWE-200 12/05/2026
Azure Entra ID Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-35431
Crítica · 10.0
CWE-918 23/04/2026
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-24305
Crítica · 9.8
CWE-285 22/01/2026
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59246
Crítica · 9.8
CWE-306 09/10/2025
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59218
Crítica · 9.6
CWE-284 09/10/2025
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability