Azure Entra ID Spoofing Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 8.8)

Spoofing · Critical · CVSS 8.8. Affects: Microsoft Entra ID.

Affected: Microsoft Entra ID

Related changes

• Microsoft Entra ID Remote Code Execution Vulnerability · Vulnerability
• Microsoft Entra ID Elevation of Privilege Vulnerability · Vulnerability
• Azure Role assignments can now be governed via Entitlement Management · Azure
• External users can be directly assigned to Access Packages · Microsoft Entra ID
• Microsoft Entra Kerberos key rotation improved reliability for incoming trust referral flows · Microsoft Entra ID
• BYOD support for Windows client using Entra registration · Microsoft Entra ID

View at Microsoft → Copy summary