9.9
Critique
CVE-2026-83941 Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network
Description
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Entra | Versions non publiées |
Références
- Entra ID Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Entra
Les 14 CVE de Microsoft Entra →
CVE-2026-62916
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to…
9.1
Critique
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over…
9.9
Critique
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network
10.0
Critique
CVE-2026-62869
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing…
8.8
Élevée