9.3
Critical
CVE-2026-40379 Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to…
Description
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Enterprise Security Token Service (ESTS) | Versions not published | |
| Microsoft Entra | Versions not published |
References
- Azure Entra ID Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified