CVE-2024-27086

🗓️ 16 Apr 2024 21:34:25Reported by MendType

mend🔗 www.mend.io

Incorrect activity export configuration in MSAL.NET for Android enables local DoS.

Reporter	Title	Published	Views	Family All 14
CNNVD	Microsoft Authentication Library 安全漏洞	16 Apr 202400:00	–	cnnvd
CVE	CVE-2024-27086	16 Apr 202421:34	–	cve
Cvelist	CVE-2024-27086 MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service	16 Apr 202421:34	–	cvelist
IBM Security Bulletins	Security Bulletin: A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation and may result in a denial of service (CVE-2024-27086)	16 Jan 202619:40	–	ibm
EUVD	EUVD-2024-1332	3 Oct 202520:07	–	euvd
Github Security Blog	MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service	16 Apr 202421:41	–	github
NVD	CVE-2024-27086	16 Apr 202422:15	–	nvd
OSV	GHSA-X674-V45J-FWXW MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service	16 Apr 202421:41	–	osv
Positive Technologies	PT-2024-21638 · Microsoft · Msal.Net	16 Apr 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-27086: Improper Export of Android Application Components	16 Apr 202400:00	–	rapid7

Source	Link
nuget	www.nuget.org/packages/Microsoft.Identity.Client
github	www.github.com/AzureAD/microsoft-authentication-library-for-dotnet/security/advisories/GHSA-x674-v45j-fwxw
learn	www.learn.microsoft.com/en-us/entra/msal/dotnet
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27086.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-27086
github	www.github.com/AzureAD/microsoft-authentication-library-for-dotnet/commit/413e319472ccf48c86647f19fa2aa49ff6038488
github	www.github.com/AzureAD/microsoft-authentication-library-for-dotnet

06 Oct 2026 02:44Current

CVSS 42.4

CVSS 3.13.9

EPSS0.00189

SSVC

CWE-926 CWE-863

MSAL.NET Android local DoS activity export