July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.
A pair of flaws in Microsoft's Entra ID identity and access management system could have allowed an attacker to gain access ...
Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...
Dutch security researcher Dirk-jan Mollema discovered a critical vulnerability in Microsoft Entra ID that allowed full access ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results
Feedback