389 matches found
EUVD-2025-33552
Azure Entra ID Elevation of Privilege Vulnerability...
EUVD-2025-33553
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2025-59246
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2025-59218
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2025-59246
Concrete details found: CVE-2025-59246 affects Microsoft Entra ID via an internal authentication-bypass in the Entra ID Graph API extension role-synchronization path, enabling remote elevation of privileges (no credentials required). Exploitation described in a GitHub exploit repo confirms unauth...
CVE-2025-59246 Azure Entra ID Elevation of Privilege Vulnerability
...
CVE-2025-59246 Azure Entra ID Elevation of Privilege Vulnerability
...
CVE-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability
...
CVE-2025-59218
CVE-2025-59218 affects Microsoft Azure Entra ID. The connected sources identify an Elevation of Privilege vulnerability in Azure Entra ID with a CVSS v3.1 base score of 9.6 (Network attack vector, Low attack complexity, No privileges required, User interaction required; Confidentiality/Integrity ...
CVE-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability
...
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability...
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability...
PT-2025-41481
Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description An elevation of privilege issue exists in Azure Entra ID. This allows unauthorized access and potential compromise of accounts. Details regarding the technical aspects of exploitation,...
Microsoft Entra ID 访问控制错误漏洞
Microsoft Entra ID is a cloud-based identity and management solution from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Entra ID that stems from an elevation of privilege vulnerability...
Microsoft Entra ID 访问控制错误漏洞
Microsoft Entra ID is a cloud-based identity and management solution from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Entra ID that stems from an elevation of privilege vulnerability...
PT-2025-41482
Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description A critical elevation of privilege flaw exists in Azure Entra ID formerly Azure Active Directory. An attacker with network access can escalate privileges, potentially gaining...
KLA89197 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Entra ID can be exploited remotely to gain privilege...
New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security
Building on the momentum of our initial launch of the Microsoft Secure Future Initiative SFI patterns and practices, this second installment continues our commitment to making security implementation practical and scalable. The first release introduced a foundational library of actionable guidanc...