CVE-2026-83711
CriticalCVSS 10.0Summary
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker may gain elevated privileges in Azure AD B2C, potentially leading to unauthorized access to data and user account management.
Recommendation
Apply patches provided by Microsoft and review key configurations and authorization policies in Azure AD B2C.
Other vulnerabilities in Microsoft Azure Active Directory B2C
See all- CVE-2026-33843Critical
Microsoft Azure Active Directory B2C contains an authentication bypass vulnerability using an alternate path or channel, allowing an unauthorized attacker to elevate privileges over a network.
- CVE-2024-21381Medium
A Spoofing vulnerability in Microsoft Azure Active Directory B2C allows an attacker to impersonate the service or users.
Original NVD description (English source)
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.