CVE-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability

...

Azure Entra ID Elevation of Privilege Vulnerability

Azure Entra ID Elevation of Privilege Vulnerability...

PT-2025-41481

Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description An elevation of privilege issue exists in Azure Entra ID. This allows unauthorized access and potential compromise of accounts. Details regarding the technical aspects of exploitation,...

PT-2025-41482

Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description A critical elevation of privilege flaw exists in Azure Entra ID formerly Azure Active Directory. An attacker with network access can escalate privileges, potentially gaining...

EUVD-2025-26868

Malicious code in bioql PyPI...

EUVD-2025-17031

Malicious code in bioql PyPI...

Himmelblau 安全漏洞

Himmelblau is an Azure Entra ID authentication module open-sourced by Himmelblau. A security vulnerability exists in Himmelblau versions 0.9.0 to 0.9.22, which stems from the derivation of a numeric GID from a group display name, which could lead to authorization bypass...

PT-2025-37014

@CVEnew @trevor lawson24 @grok Yikes, deriving GIDs from display names is a wild choice. This CVE-2025-59044559049044 in Himmelblau 0.9.x is a serious interoperability flaw for Azure Entra ID and Intune. You two should definitely take a look...

CVE-2025-55241

Azure Entra ID Elevation of Privilege Vulnerability...

CVE-2025-55241

Azure Entra ID Elevation of Privilege Vulnerability...

CVE-2025-55241

PT-2025-36098 confirms CVE-2025-55241 affects Microsoft Entra ID (formerly Azure Active Directory) and describes the root cause as improper validation of tenant context during token authentication, enabling potential elevation of privileges via actor tokens. The advisory states a critical, networ...

CVE-2025-55241 Azure Entra ID Elevation of Privilege Vulnerability

...

KLA87341 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Bot Service can be exploited remotely to gain privileges. 2. An elevation ...

PT-2025-36098

Name of the Vulnerable Software and Affected Versions Microsoft Entra ID affected versions not specified Description A critical flaw in the authentication procedure of Microsoft Entra ID formerly Azure Active Directory allowed remote attackers to elevate privileges and impersonate any user,...

CVE-2025-54882

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials...

Himmelblau 安全漏洞

Himmelblau is an Azure Entra ID authentication module open-sourced by Himmelblau. A security vulnerability exists in Himmelblau versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, which stems from the Cloud TGT credential cache being stored as globally readable...

CVE-2025-54781 Himmelblau leaks an Intune service access token in its logs

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau in version 1.0.0, the himmelblaudtasks service leaks an Intune service access token to the system journal. This short-lived token can be used to detect the host's Intune...

CVE-2025-54781

CVE-2025-54781 affects Himmelblau: in version 1.0.0, when debugging is enabled, the himmelblaud_tasks service leaks a short‑lived Intune service access token to the system journal. The token can reveal the host’s Intune compliance status and may enable undocumented administrative operations on th...

CVE-2025-54781 Himmelblau leaks an Intune service access token in its logs

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau in version 1.0.0, the himmelblaudtasks service leaks an Intune service access token to the system journal. This short-lived token can be used to detect the host's Intune...

PT-2025-31706 · Microsoft · Himmelblau +2

Name of the Vulnerable Software and Affected Versions: Himmelblau version 1.0.0 versions prior to 1.1.0 Description: Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau, the himmelblaud tasks service leaks an Intune service...