Vulnerabilidades do Microsoft Microsoft Entra
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Microsoft Entra: 10 registro(s), com versões afetadas e correções.
CVE-2026-83941
Crítica · 9.9
CWE-862 08/09/2026
Entra ID Elevation of Privilege Vulnerability
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
CVE-2026-83711
Crítica · 10.0
CWE-639 03/09/2026
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62916
Crítica · 9.1
CWE-288 03/09/2026
Microsoft Entra ID Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-42901
Crítica · 10.0
CWE-346 22/05/2026
Microsoft Entra ID Elevation of Privilege Vulnerability
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-33843
Crítica · 9.8
CWE-288 22/05/2026
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-40379
Alta · 7.5
CWE-200 12/05/2026
Azure Entra ID Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-35431
Crítica · 10.0
CWE-918 23/04/2026
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-24305
Crítica · 9.8
CWE-285 22/01/2026
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59246
Crítica · 9.8
CWE-306 09/10/2025
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59218
Crítica · 9.6
CWE-284 09/10/2025
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability