Azure Active Directory (Microsoft) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-06. Vendor: Microsoft.

CVEs of Azure Active Directory

• CVE-2026-50481 - CVSS 9.9 (critical), 2026-08-06: Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
• CVE-2026-50653 - CVSS 7.5 (high), 2026-07-14: Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
• CVE-2026-50652 - CVSS 7.5 (high), 2026-07-14: Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
• CVE-2026-45480 - CVSS 10 (critical), 2026-06-19: Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
• CVE-2024-21381 - CVSS 6.8 (medium), 2024-02-13: Microsoft Azure Active Directory B2C Spoofing Vulnerability
• CVE-2021-42306 - CVSS 8.1 (high), 2021-11-24: An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate…