A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...
July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.
Security researchers have found a critical vulnerability in Microsoft Entra ID which could have allowed threat actors to gain ...
All Microsoft Entra Tenants Were Exposed to Silent Compromise via Invisible Actor Tokens: Researcher
Microsoft patches CVE-2025-55241, an Azure Entra elevation of privilege vulnerability that could have been exploited to compromise tenants.
Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of ...
Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...
A pair of flaws in Microsoft's Entra ID identity and access management system could have allowed an attacker to gain access ...
Dutch security researcher Dirk-jan Mollema discovered a critical vulnerability in Microsoft Entra ID that allowed full access ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results
Feedback