Description
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Global Secure Access (GSA) | - | — |
Advisories 1
- MSRC-CVE-2026-23663 Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability Microsoft Security Response Center · May 21, 2026
References
- Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability vendor-advisory patch