Azure Entra ID vulnerabilities
5 known CVE vulnerabilities in Azure Entra ID, translated and rated.
- CVE-2026-40379Critical
Azure Entra ID has an exposure of sensitive information that allows an unauthorized attacker to perform spoofing over a network.
- CVE-2025-59246Critical
An Elevation of Privilege vulnerability has been identified in Azure Entra ID. Technical details are not provided in the description.
- CVE-2025-59218Critical
An Elevation of Privilege vulnerability in Azure Entra ID allows an attacker to gain higher privileges in the cloud environment. Technical details were not disclosed in the description.
- CVE-2026-62869High
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
- CVE-2026-23663High
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

