What’s Vulnerable › Products

Microsoft Entra vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your Microsoft Entra version is affected

Latest Microsoft Entra vulnerabilities

• CVE-2026-83941 — Entra ID Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-62916 — Microsoft Entra ID Elevation of Privilege Vulnerability (CVSS 9.8)
• CVE-2026-69851 — Microsoft Entra ID Elevation of Privilege Vulnerability (CVSS 9.9)
• CVE-2026-69836 — Microsoft Entra ID Remote Code Execution Vulnerability (CVSS 10.0)
• CVE-2026-62869 — Azure Entra ID Spoofing Vulnerability (CVSS 8.8)
• CVE-2026-42901 — Microsoft Entra ID Elevation of Privilege Vulnerability (CVSS 10.0)
• CVE-2026-33843 — Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability (CVSS 9.8)
• CVE-2026-40379 — Azure Entra ID Spoofing Vulnerability (CVSS 7.5)
• CVE-2026-35431 — Microsoft Entra ID Entitlement Management Spoofing Vulnerability (CVSS 10.0)
• CVE-2026-24305 — Azure Entra ID Elevation of Privilege Vulnerability (CVSS 9.8)
• CVE-2025-59246 — Azure Entra ID Elevation of Privilege Vulnerability (CVSS 9.8)
• CVE-2025-59218 — Azure Entra ID Elevation of Privilege Vulnerability (CVSS 9.6)
• CVE-2025-55241 — Azure Entra ID Elevation of Privilege Vulnerability (CVSS 10.0)
• CVE-2024-43477 — Microsoft Entra ID Elevation of Privilege Vulnerability (CVSS 7.5)