MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service

🗓️ 16 Apr 2024 21:41:57Reported by GitHub Advisory DatabaseType

MSAL.NET local denial of service on Xamarin Android and .NET Android (MAUI

Reporter	Title	Published	Views	Family All 13
CNNVD	Microsoft Authentication Library 安全漏洞	16 Apr 202400:00	–	cnnvd
CVE	CVE-2024-27086	16 Apr 202421:34	–	cve
Cvelist	CVE-2024-27086 MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service	16 Apr 202421:34	–	cvelist
IBM Security Bulletins	Security Bulletin: A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation and may result in a denial of service (CVE-2024-27086)	16 Jan 202619:40	–	ibm
EUVD	EUVD-2024-1332	3 Oct 202520:07	–	euvd
NVD	CVE-2024-27086	16 Apr 202422:15	–	nvd
OSV	CVE-2024-27086 MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service	16 Apr 202421:34	–	osv
OSV	GHSA-X674-V45J-FWXW MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service	16 Apr 202421:41	–	osv
Positive Technologies	PT-2024-21638 · Microsoft · Msal.Net	16 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-27086	23 May 202508:10	–	redhatcve

Vulners

Node

microsoft identity.clientRange4.60.0–4.60.3nuget

microsoft identity.clientRange4.48.0–4.59.1nuget

Source	Link
github	www.github.com/AzureAD/microsoft-authentication-library-for-dotnet/security/advisories/GHSA-x674-v45j-fwxw
github	www.github.com/AzureAD/microsoft-authentication-library-for-dotnet/commit/413e319472ccf48c86647f19fa2aa49ff6038488
nuget	www.nuget.org/packages/Microsoft.Identity.Client
learn	www.learn.microsoft.com/en-us/entra/msal/dotnet
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-27086
github	www.github.com/advisories/GHSA-x674-v45j-fwxw

04 Feb 2025 23:06Current

4.3Medium risk

Vulners AI Score4.3

CVSS 3.13.9

EPSS0.00053

SSVC