Microsoft Entra Id
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Entra Id.
Recent Microsoft Entra Id Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-69851 | CVE-2026-69851 Microsoft Entra ID Elevation of Privilege Vulnerability | August 20, 2026 |
| CVE-2026-69836 | CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability | August 20, 2026 |
| CVE-2026-35431 | CVE-2026-35431 Microsoft Entra ID Entitlement Management Spoofing Vulnerability | April 23, 2026 |
By the Year
In 2026 there have been 8 vulnerabilities in Microsoft Entra Id with an average score of 9.6 out of ten. Last year, in 2025 Microsoft Entra Id had 3 security vulnerabilities published. That is, 5 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.25
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 8 | 9.55 |
| 2025 | 3 | 9.80 |
It may take a day or so for new Microsoft Entra Id vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Entra Id Security Vulnerabilities
Aug 2026: Microsoft Entra ID Remote Code Execution Vulnerability
CVE-2026-69836
10 - Critical
- August 20, 2026
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-69851
9.9 - Critical
- August 20, 2026
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
SSRF
Aug 2026: Azure Entra ID Spoofing Vulnerability
CVE-2026-62869
8.8 - High
- August 11, 2026
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
Insufficient Verification of Data Authenticity
May 2026: Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-42901
10 - Critical
- May 22, 2026
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Origin Validation Error
May 2026: Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVE-2026-33843
9.1 - Critical
- May 22, 2026
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
Authentication Bypass Using an Alternate Path or Channel
May 2026: Azure Entra ID Spoofing Vulnerability
CVE-2026-40379
9.3 - Critical
- May 12, 2026
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.
Information Disclosure
Apr 2026: Microsoft Entra ID Entitlement Management Spoofing Vulnerability
CVE-2026-35431
10 - Critical
- April 23, 2026
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
SSRF
Jan 2026: Azure Entra ID Elevation of Privilege Vulnerability
CVE-2026-24305
9.3 - Critical
- January 22, 2026
Azure Entra ID Elevation of Privilege Vulnerability
AuthZ
Oct 2025: Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59246
9.8 - Critical
- October 09, 2025
Azure Entra ID Elevation of Privilege Vulnerability
Missing Authentication for Critical Function
Oct 2025: Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59218
9.6 - Critical
- October 09, 2025
Azure Entra ID Elevation of Privilege Vulnerability
Authorization
Sep 2025: Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-55241
10 - Critical
- September 04, 2025
Azure Entra ID Elevation of Privilege Vulnerability
authentification
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Entra Id or by Microsoft? Click the Watch button to subscribe.
