Entra ID Elevation of Privilege Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 9.9)

Elevation of Privilege · Critical · CVSS 9.9. Affects: Microsoft Entra ID.

Affected: Microsoft Entra ID

Related changes

• Microsoft Entra ID Elevation of Privilege Vulnerability · Elevation
• Microsoft Entra ID Remote Code Execution Vulnerability · Vulnerability
• Azure Entra ID Spoofing Vulnerability · Vulnerability
• External users can be directly assigned to Access Packages · Microsoft Entra ID
• Microsoft Entra Kerberos key rotation improved reliability for incoming trust referral flows · Microsoft Entra ID
• BYOD support for Windows client using Entra registration · Microsoft Entra ID

Change history

View at Microsoft → Copy summary