5.3
Medium
CVE-2026-80092 Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate…
Description
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft-identity-web 3.16 | earliest → < 3.16.0 | 3.16.0 |
References
- Microsoft Identity Web Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified