Microsoft Entra
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:microsoft_entra:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Microsoft Entra (a8f9a065-3740-5d19-860a-8b3d13a85818) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-42901 |
vulnerable | 2026-06-08 08:03:16.972651 |
Microsoft Entra ID Elevation of Privilege Vulnerability
CRITICAL (10)
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-05-22T22:04:40.921Z
Updated: 2026-06-19T16:13:18.837Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40379 |
vulnerable | 2026-06-08 08:01:20.455122 |
Azure Entra ID Spoofing Vulnerability
CRITICAL (9.3)
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-05-12T16:58:10.399Z
Updated: 2026-06-19T16:11:51.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35431 |
vulnerable | 2026-06-08 07:59:13.961806 |
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
CRITICAL (10)
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-04-23T21:37:42.137Z
Updated: 2026-06-19T16:09:02.637Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33843 |
vulnerable | 2026-06-08 07:59:11.505016 |
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CRITICAL (9.1)
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-05-22T22:03:10.460Z
Updated: 2026-06-19T16:11:59.306Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24305 |
vulnerable | 2026-06-08 07:51:17.460998 |
Azure Entra ID Elevation of Privilege Vulnerability
CRITICAL (9.3)
Azure Entra ID Elevation of Privilege Vulnerability
Published: 2026-01-22T22:47:36.181Z
Updated: 2026-04-01T13:49:25.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59246 |
vulnerable | 2026-06-08 07:35:21.324660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59218 |
vulnerable | 2026-06-08 07:35:21.083655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55241 |
vulnerable | 2026-06-08 07:33:14.489268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43477 |
vulnerable | 2026-06-08 06:45:51.619237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.