Microsoft Entra vulnerabilities

Latest Microsoft Entra CVEs

Newest publication first

1. CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

   Published 2026-09-03

   Critical·CVSS 10.0 EPSS 0.80%

   Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.

2. CVE-2024-21401 Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability

   Published 2024-02-13

   Critical·CVSS 9.8 EPSS 1.5%

   Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability

3. CVE-2024-21381 Microsoft Azure Active Directory B2C Spoofing Vulnerability

   Published 2024-02-13

   Medium·CVSS 6.8 EPSS 0.42%

   Microsoft Azure Active Directory B2C Spoofing Vulnerability

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.