7.8
High
CVE-2026-65673 Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a…
Description
Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Entra Connect 1.0 | 1.0.0 → < 2.6.84.0 | 2.6.84.0 |
References
- Microsoft Entra Connect Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified