Microsoft Entra ID
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:entra_id:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Entra Id (c26a84db-6749-5d2a-bad9-06e4fc54c015) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-69836 |
vulnerable | 2026-11-03 10:18:08.350500 |
Microsoft Entra ID Remote Code Execution Vulnerability
CRITICAL (10)
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Published: 2026-08-20T21:43:12.611Z
Updated: 2026-10-30T17:19:25.895Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-69851 |
vulnerable | 2026-11-03 10:18:06.239134 |
Microsoft Entra ID Elevation of Privilege Vulnerability
CRITICAL (9.9)
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
Published: 2026-08-20T21:43:12.142Z
Updated: 2026-10-30T17:19:25.381Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62916 |
vulnerable | 2026-11-03 10:15:50.424790 |
Microsoft Entra ID Elevation of Privilege Vulnerability
CRITICAL (9.1)
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-09-03T22:59:17.956Z
Updated: 2026-10-31T16:09:17.934Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-83941 |
vulnerable | 2026-11-03 10:15:39.186626 |
Entra ID Elevation of Privilege Vulnerability
CRITICAL (9.9)
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
Published: 2026-09-08T17:10:36.632Z
Updated: 2026-10-31T16:09:20.273Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35431 |
vulnerable | 2026-06-08 07:59:13.963257 |
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
CRITICAL (10)
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-04-23T21:37:42.137Z
Updated: 2026-10-15T15:53:49.542Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24305 |
vulnerable | 2026-06-08 07:51:17.462267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59246 |
vulnerable | 2026-06-08 07:35:21.325016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59218 |
vulnerable | 2026-06-08 07:35:21.085204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55241 |
vulnerable | 2026-06-08 07:33:14.490569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43477 |
vulnerable | 2026-06-08 06:45:51.620431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.