Microsoft Entra
3 CVEs affecting Microsoft Entra. Latest disclosed: 2026-09-03. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-83711 | Critical | 10.0 | 2026-09-03 | Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. |
CVE-2024-21401 | Critical | 9.8 | 2024-02-13 | Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability |
CVE-2024-21381 | Medium | 6.8 | 2024-02-13 | Microsoft Azure Active Directory B2C Spoofing Vulnerability |