Skip to content

Vulnerabilities of Microsoft Microsoft Entra

Is your version affected?

CVE Summary Score Published
CVE-2026-83941 Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network 9.9 Critical Sep 8, 2026
CVE-2026-62916 Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to… 9.1 Critical Sep 3, 2026
CVE-2026-69836 Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network 10.0 Critical Aug 20, 2026
CVE-2026-69851 Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over… 9.9 Critical Aug 20, 2026
CVE-2026-42901 Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network 10.0 Critical May 22, 2026
CVE-2026-33843 Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an… 9.1 Critical May 22, 2026
CVE-2026-40379 Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to… 9.3 Critical May 12, 2026
CVE-2026-35431 Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to… 10.0 Critical Apr 23, 2026
CVE-2026-24305 Azure Entra ID Elevation of Privilege Vulnerability 9.3 Critical Jan 22, 2026
CVE-2025-59246 Azure Entra ID Elevation of Privilege Vulnerability 9.8 Critical Oct 9, 2025
CVE-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability 9.6 Critical Oct 9, 2025
CVE-2025-55241 Azure Entra ID Elevation of Privilege Vulnerability 10.0 Critical Sep 4, 2025

Other Microsoft products