Entra Id vulnerabilities

2 known vulnerabilities in Entra Id from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Microsoft Entra: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-33843May 22, 2026Microsoft

  Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.

• 7.5 High severity

  Microsoft Entra: Improper Access Control

  CVE-2024-43477Aug 23, 2024MicrosoftEPSS 1.04%

  Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on another tenant.