Entra Id CVEs and Security Vulnerabilities

Export limit exceeded: 220018 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Export CSV

CVE	Vendors	Products	Updated	CVSS v3.1
CVE-2026-83711	1 Microsoft	2 Azure Active Directory B2c, Entra Id	2026-10-14	10 Critical
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83941	1 Microsoft	2 Entra Id, Microsoft Entra Id	2026-09-16	9.9 Critical
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
CVE-2026-62916	1 Microsoft	2 Entra Id, Microsoft Entra Id	2026-09-08	9.1 Critical
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69836	1 Microsoft	2 Entra Id, Microsoft Entra Id	2026-08-29	10 Critical
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
CVE-2026-69851	1 Microsoft	2 Entra Id, Microsoft Entra Id	2026-08-25	9.9 Critical
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
CVE-2026-62869	1 Microsoft	2 Entra Id, Microsoft Entra Id	2026-08-13	8.8 High
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.

Page 1 of 1.