Skip to content
OpenAdvisories

Product · Microsoft

Microsoft Entra

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-83941

    Entra ID Elevation of Privilege Vulnerability

    Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Entra
  • Critical 9.1
    CVE-2026-62916

    Microsoft Entra ID Elevation of Privilege Vulnerability

    Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Microsoft Entra
  • Critical 10.0
    CVE-2026-69836 Exploited Public exploit

    Microsoft Entra ID Remote Code Execution Vulnerability

    Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

    Microsoft Microsoft Entra
  • Critical 9.9
    CVE-2026-69851

    Microsoft Entra ID Elevation of Privilege Vulnerability

    Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Entra
  • Critical 10.0
    CVE-2026-42901

    Microsoft Entra ID Elevation of Privilege Vulnerability

    Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Microsoft Entra
  • Critical 9.1
    CVE-2026-33843

    Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

    Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Microsoft Entra
  • Critical 9.3
    CVE-2026-40379

    Azure Entra ID Spoofing Vulnerability

    Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft Entra
  • Critical 10.0
    CVE-2026-35431

    Microsoft Entra ID Entitlement Management Spoofing Vulnerability

    Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft Entra
  • Critical 9.3
    CVE-2026-24305

    Azure Entra ID Elevation of Privilege Vulnerability

    Azure Entra ID Elevation of Privilege Vulnerability

    Microsoft Microsoft Entra
  • Critical 9.8
    CVE-2025-59246

    Azure Entra ID Elevation of Privilege Vulnerability

    Azure Entra ID Elevation of Privilege Vulnerability

    Microsoft Microsoft Entra
  • Critical 9.6
    CVE-2025-59218

    Azure Entra ID Elevation of Privilege Vulnerability

    Azure Entra ID Elevation of Privilege Vulnerability

    Microsoft Microsoft Entra
  • Critical 10.0
    CVE-2025-55241

    Azure Entra ID Elevation of Privilege Vulnerability

    Azure Entra ID Elevation of Privilege Vulnerability

    Microsoft Microsoft Entra