Advisories · Technology

Microsoft Entra.

Every CVE that names Microsoft Entra among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-83941 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Entra ID Elevation of Privilege Vulnerability
- Microsoft Entra
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-62916 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Microsoft Entra ID Elevation of Privilege Vulnerability
- Microsoft Entra
- Authentication bypass
Not analysed yet 3 Sept 2026
CVE-2026-83711 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
- Microsoft Entra
- Broken access control
Not analysed yet 3 Sept 2026
CVE-2026-69836 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Microsoft Entra ID Remote Code Execution Vulnerability
- Microsoft Entra
- Insecure deserialization
Not analysed yet 20 Aug 2026
CVE-2026-69851 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Microsoft Entra ID Elevation of Privilege Vulnerability
- Microsoft Entra
- Server-side request forgery (SSRF)
Not analysed yet 20 Aug 2026
CVE-2026-62869 CVE record

CVSS 8.8 High

Azure Entra ID Spoofing Vulnerability
- Microsoft Entra
- CWE-345
Not analysed yet 11 Aug 2026
CVE-2026-42901 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Microsoft Entra ID Elevation of Privilege Vulnerability
- Microsoft Entra
- CWE-346
Not analysed yet 22 May 2026
CVE-2026-33843 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
- Microsoft Entra
- Authentication bypass
Not analysed yet 22 May 2026
CVE-2026-40379 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Azure Entra ID Spoofing Vulnerability
- Microsoft Entra
- Information disclosure
Not analysed yet 12 May 2026
CVE-2026-35431 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Microsoft Entra ID Entitlement Management Spoofing Vulnerability
- Microsoft Entra
- Server-side request forgery (SSRF)
Not analysed yet 23 Apr 2026
CVE-2026-24305 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Azure Entra ID Elevation of Privilege Vulnerability
- Microsoft Entra
- Broken access control
Not analysed yet 22 Jan 2026
CVE-2025-59246 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Azure Entra ID Elevation of Privilege Vulnerability
- Microsoft Entra
- Authentication bypass
Not analysed yet 9 Oct 2025
CVE-2025-59218 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Azure Entra ID Elevation of Privilege Vulnerability
- Microsoft Entra
- Broken access control
Not analysed yet 9 Oct 2025
CVE-2025-55241 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Azure Entra ID Elevation of Privilege Vulnerability
- Microsoft Entra
- Authentication bypass
Not analysed yet 4 Sept 2025
CVE-2024-43477 CVE record

CVSS 7.5 High

Microsoft Entra ID Elevation of Privilege Vulnerability
- Microsoft Entra
- Broken access control
Not analysed yet 23 Aug 2024
CVE-2024-21401 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
- Microsoft Entra
- Broken access control
Not analysed yet 13 Feb 2024
CVE-2024-21381 CVE record

CVSS 6.8 Medium

Microsoft Azure Active Directory B2C Spoofing Vulnerability
- Microsoft Entra
- Cross-site request forgery (CSRF)
Not analysed yet 13 Feb 2024