Microsoft Microsoft Entra ID

Name: Microsoft Microsoft Entra ID
Brand: Microsoft

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

5critical3high0medium0low

updated 2026-10-28

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-69836US	—	1.53% (75th)	Exploit	no fix	2026-08-20	—
CVE-2025-59246US	—OT elevated	7.60% (95th)	—	no fix	2025-10-09	2 versions
CVE-2025-55241US	—	1.61% (76th)	—	no fix	2025-09-04	—
CVE-2025-59247US	critical9.8	1.52% (74th)	—	no fix	2025-10-09	≤ vers:unknown/*
CVE-2026-59115US	—	1.02% (63rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-49163US	—	1.02% (63rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-47299US	—	1.01% (63rd)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-68823US	—	0.93% (61st)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-40379US	high7.5	0.91% (60th)	—	no fix	2026-05-12	—
CVE-2026-56162US	—	0.90% (60th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-62916US	critical9.8OT elevated	0.86% (59th)	—	no fix	2026-09-03	—
CVE-2026-57104US	critical9.6	0.86% (58th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65806US	—OT elevated	0.84% (58th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-50516US	—OT elevated	0.83% (57th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-50481US	—	0.82% (57th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-70340US	high8.8OT elevated	0.80% (56th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2025-59285US	—	0.78% (56th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2026-83941US	high8.8OT elevated	0.78% (56th)	—	no fix	2026-09-08	—
CVE-2026-69851US	—	0.78% (56th)	—	no fix	2026-08-20	—
CVE-2026-65668US	—	0.78% (56th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-62830US	—OT elevated	0.78% (56th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-56161US	—	0.69% (53rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2025-59218US	—	0.66% (51st)	—	no fix	2025-10-09	2 versions
CVE-2025-59271US	—	0.66% (51st)	—	no fix	2025-10-09	≤ vers:unknown/*
CVE-2025-59494US	—	0.64% (50th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2026-62873US	—	0.61% (49th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2025-58724US	—	0.57% (47th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-47989US	—	0.55% (46th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2026-24305US	critical9.8	0.54% (45th)	—	no fix	2026-01-22	—
CVE-2026-35431US	—	0.51% (43rd)	—	no fix	2026-04-23	—
CVE-2026-33843US	critical9.8OT elevated	0.47% (41st)	—	no fix	2026-05-22	—
CVE-2026-62869US	—OT elevated	0.44% (38th)	—	no fix	2026-08-11	2 versions
CVE-2025-59292US	—	0.44% (38th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-59291US	—	0.44% (38th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-55321US	—	0.44% (38th)	—	no fix	2025-10-09	≤ vers:unknown/*
CVE-2026-65673US	—	0.32% (25th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-42901US	—	0.30% (23rd)	—	no fix	2026-05-22	—
CVE-2026-63522US	—	0.30% (22nd)	—	no fix	2026-08-11	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control6 CVEs
CWE-862Missing Authorization4 CVEs
CWE-285Improper Authorization2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-73External Control of File Name or Path2 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)28 CVEs
USMicrosoft MSRC (CSAF)13 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan