Microsoft Azure Active Directory
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Azure Active Directory.
Recent Microsoft Azure Active Directory Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-50652 | CVE-2026-50652 Azure Active Directory Denial of Service Vulnerability | July 14, 2026 |
| CVE-2026-50653 | CVE-2026-50653 Azure Active Directory Denial of Service Vulnerability | July 14, 2026 |
| CVE-2026-45480 | CVE-2026-45480 Azure Active Directory Elevation of Privilege Vulnerability | June 18, 2026 |
| CVE-2024-21381 | Microsoft Azure Active Directory B2C Spoofing Vulnerability | February 13, 2024 |
| CVE-2023-36871 | Azure Active Directory Security Feature Bypass Vulnerability | July 11, 2023 |
| CVE-2023-36871 | Azure Active Directory Security Feature Bypass Vulnerability | July 11, 2023 |
| CVE-2021-42306 | Azure Active Directory Information Disclosure Vulnerability | November 17, 2021 |
| CVE-2021-36949 | Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability | August 10, 2021 |
By the Year
In 2026 there have been 3 vulnerabilities in Microsoft Azure Active Directory with an average score of 8.3 out of ten. Azure Active Directory did not have any published security vulnerabilities last year. That is, 3 more vulnerabilities have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 3 | 8.33 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 6.80 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 1 | 8.10 |
It may take a day or so for new Azure Active Directory vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Azure Active Directory Security Vulnerabilities
Jul 2026: Azure Active Directory Denial of Service Vulnerability
CVE-2026-50652
7.5 - High
- July 14, 2026
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Marshaling, Unmarshaling
Jul 2026: Azure Active Directory Denial of Service Vulnerability
CVE-2026-50653
7.5 - High
- July 14, 2026
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Infinite Loop
Jun 2026: Azure Active Directory Elevation of Privilege Vulnerability
CVE-2026-45480
10 - Critical
- June 19, 2026
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
authentification
Azure AD B2C Spoofing Vulnerability
CVE-2024-21381
6.8 - Medium
- February 13, 2024
Microsoft Azure Active Directory B2C Spoofing Vulnerability
An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential? on an Azure AD Application or Service Principal (
CVE-2021-42306
8.1 - High
- November 24, 2021
An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential? on an Azure AD Application or Service Principal (which is not recommended). This vulnerability allows a user or service in the tenant with application read access to read the private key data that was added to the application. Azure AD?addressed this vulnerability by preventing disclosure of any private key?values added?to the application. Microsoft has identified services that could manifest this vulnerability, and steps that customers should take to be protected. Refer to the FAQ section for more information. For more details on this issue, please refer to the MSRC Blog Entry.
Insufficiently Protected Credentials
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Azure Active Directory or by Microsoft? Click the Watch button to subscribe.
