Veille CVE

Recherche « Microsoft Azure Active Directory »

9 CVE

Critique 6 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Azure Active Directory » ✕
  1. CVE-2026-85916 5.5 Moyenne

    Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1

    Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.

  2. CVE-2026-83711 10.0 Critique

    Microsoft Entra · Microsoft azure active directory b2c

    Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.

  3. CVE-2026-69851 9.9 Critique

    Microsoft Entra · Microsoft entra id

    Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

  4. CVE-2026-50481 9.9 Critique

    Microsoft Azure Active Directory

    Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

  5. CVE-2026-54733 9.3 Critique

    microsoft o365-moodle

    The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin local_o365 Teams SSO endpoint sso_login.php base64-decodes a JWT payload and authenticates users from the upn claim without verifying the JWT signature, allowing an unauthenticated attacker to forge a token and obtain a Moodle session as an O365-authenticated user. This issue is fixed in versions 4.5.6, 5.0.5, and 5.1.1.

  6. CVE-2026-50653 7.5 Élevée

    Microsoft Azure Active Directory · Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.

  7. CVE-2026-50652 7.5 Élevée

    Microsoft Azure Active Directory · Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.

  8. CVE-2026-45480 10.0 Critique

    Microsoft Azure Active Directory

    Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.

  9. CVE-2026-33843 9.8 Critique

    Microsoft Entra · Microsoft entra id

    Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.