Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:microsoft_entra_id:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductMicrosoft Entra Id (57d1d922-8243-5614-b2f4-5e078b96fa35)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-69836 vulnerable 2026-11-03 10:18:08.349859 Microsoft Entra ID Remote Code Execution Vulnerability
CRITICAL (10)
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Published: 2026-08-20T21:43:12.611Z
Updated: 2026-10-30T17:19:25.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-69851 vulnerable 2026-11-03 10:18:06.238254 Microsoft Entra ID Elevation of Privilege Vulnerability
CRITICAL (9.9)
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
Published: 2026-08-20T21:43:12.142Z
Updated: 2026-10-30T17:19:25.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-62916 vulnerable 2026-11-03 10:15:50.423899 Microsoft Entra ID Elevation of Privilege Vulnerability
CRITICAL (9.1)
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-09-03T22:59:17.956Z
Updated: 2026-10-31T16:09:17.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83941 vulnerable 2026-11-03 10:15:39.185761 Entra ID Elevation of Privilege Vulnerability
CRITICAL (9.9)
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
Published: 2026-09-08T17:10:36.632Z
Updated: 2026-10-31T16:09:20.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-62869 vulnerable 2026-09-16 04:32:53.013364 Azure Entra ID Spoofing Vulnerability
HIGH (8.8)
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
Published: 2026-08-11T17:07:24.119Z
Updated: 2026-10-30T17:23:13.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42901 vulnerable 2026-06-08 08:03:16.973227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40379 vulnerable 2026-06-08 08:01:20.455820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-35431 vulnerable 2026-06-08 07:59:13.961947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33843 vulnerable 2026-06-08 07:59:11.505781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24305 vulnerable 2026-06-08 07:51:17.461732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59246 vulnerable 2026-06-08 07:35:21.324878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59218 vulnerable 2026-06-08 07:35:21.084431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55241 vulnerable 2026-06-08 07:33:14.490023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43477 vulnerable 2026-06-08 06:45:51.619903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.