67 matches found
EUVD-2026-102952
Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...
PT-2026-115975
Name of the Vulnerable Software and Affected Versions Microsoft Authentication Library MSAL for Node.js affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no...
CVE-2026-109461: Origin Validation Error
Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...
MSAL Authentication Bypass
The vulnerability of the Microsoft Authentication Library MSAL relates to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...
CVE-2026-84003
Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-84003: Authentication Bypass by Capture-replay
Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...
Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk
Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft's real authentication page. Once access and refresh tokens are issued, attackers may retain access to...
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
PYSEC-2026-1209 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
[SECURITY] Fedora 44 Update: python-msal-1.36.0-1.fc44
The Microsoft Authentication Library for Python enables applications to integrate with the Microsoft identity platform. It allows you to sign in users or apps with Microsoft identities Azure AD, Microsoft Accounts and Azure AD B2C accounts and obtain tokens to call Microsoft APIs such as Microsof...
[SECURITY] Fedora 43 Update: python-msal-1.36.0-1.fc43
The Microsoft Authentication Library for Python enables applications to integrate with the Microsoft identity platform. It allows you to sign in users or apps with Microsoft identities Azure AD, Microsoft Accounts and Azure AD B2C accounts and obtain tokens to call Microsoft APIs such as Microsof...
CLEANSTART-2026-DY37532 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Security vulnerability affects the cortex-fips package. Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
Security Bulletin: A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation and may result in a denial of service (CVE-2024-27086)
Summary A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation which may result in a denial of service. Microsoft Azure Identity is used by IBM Robotic Process Automation for authentication processing. This bulletin identifies the security fixes to apply to...
Microsoft NTLM security vulnerability
Microsoft NTLM is a Microsoft authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to perform spoofing attacks. The following...
Microsoft NTLM security vulnerability
Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM that originates from an attacker exploiting the vulnerability to perform a spoofing...
EUVD-2019-10044
Malware in sbrugna...
EUVD-2024-2098
Malicious code in bioql PyPI...
Amazon Disrupts Russian APT29 Watering Hole Targeting Microsoft Authentication
Amazon has disrupted a Russian APT29 watering hole campaign that used compromised sites to target Microsoft authentication with…...
Microsoft NTLM authorization issue vulnerability
Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. An authorization problem vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to elevate privileges. The...
CVE-2019-1487
An information disclosure vulnerability in Android Apps using Microsoft Authentication Library MSAL 0.3.1-Alpha or later exists under specific conditions, aka 'Microsoft Authentication Library for Android Information Disclosure Vulnerability'...