Microsoft Entra vulnerabilities

• microsoft entra device registration Entra Device Registration Elevation of Privilege Vulnerability CVE-2026-109469 10.0 CriticalNovember 6, 2026
• microsoft entra application proxy AAD App Proxy Elevation of Privilege Vulnerability CVE-2026-97785 10.0 CriticalOctober 22, 2026
• microsoft entra id, entra +1 more Entra ID Elevation of Privilege Vulnerability CVE-2026-83941 9.9 CriticalSeptember 8, 2026
• microsoft entra id, entra +1 more Microsoft Entra ID Elevation of Privilege Vulnerability CVE-2026-62916 9.1 CriticalSeptember 3, 2026
• microsoft azure active directory b2c, entra +1 more Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability CVE-2026-83711 10.0 CriticalSeptember 3, 2026
• microsoft entra id, entra +1 more Microsoft Entra ID Elevation of Privilege Vulnerability CVE-2026-69851 9.9 CriticalAugust 20, 2026
• microsoft entra id, entra +1 more Microsoft Entra ID Remote Code Execution Vulnerability CVE-2026-69836 Known exploitedPublic exploit 10.0 CriticalAugust 20, 2026
• microsoft entra id, entra +1 more Azure Entra ID Spoofing Vulnerability CVE-2026-62869 8.8 HighAugust 11, 2026
• microsoft entra connect Microsoft Entra Connect Elevation of Privilege Vulnerability CVE-2026-65673 7.8 HighAugust 11, 2026
• microsoft dynamics 365 business central 2024, dynamics 365 business central 2025, dynamics 365 business central 2026 +2 more +4 more Microsoft Dynamics Business Central Information Disclosure Vulnerability CVE-2026-40375 6.5 MediumAugust 11, 2026
• microsoft entra provisioning service Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability CVE-2026-59115 9.9 CriticalAugust 6, 2026
• microsoft entra provisioning service Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability CVE-2026-57100 9.9 CriticalJuly 2, 2026
• microsoft entra id, entra +1 more Microsoft Entra ID Elevation of Privilege Vulnerability CVE-2026-42901 10.0 CriticalMay 22, 2026
• microsoft entra id, entra +1 more Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability CVE-2026-33843 9.1 CriticalMay 22, 2026
• microsoft dynamics 365 business central, dynamics 365 business central 2024 release wave 2, dynamics 365 business central 2026 release wave 1 +2 more +4 more Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability CVE-2026-40417 7.8 HighMay 12, 2026
• microsoft entra id, entra +1 more Azure Entra ID Spoofing Vulnerability CVE-2026-40379 9.3 CriticalMay 12, 2026
• microsoft azure iot central Azure IoT Central Elevation of Privilege Vulnerability CVE-2026-21515 9.9 CriticalApril 24, 2026
• microsoft entra id, entra +1 more Microsoft Entra ID Entitlement Management Spoofing Vulnerability CVE-2026-35431 10.0 CriticalApril 23, 2026
• microsoft entra id, entra +1 more Azure Entra ID Elevation of Privilege Vulnerability CVE-2026-24305 9.3 CriticalJanuary 22, 2026
• microsoft entra id, entra +1 more Azure Entra ID Elevation of Privilege Vulnerability CVE-2025-59246 9.8 CriticalOctober 9, 2025
• microsoft entra id, entra +1 more Azure Entra ID Elevation of Privilege Vulnerability CVE-2025-59218 9.6 CriticalOctober 9, 2025
• microsoft entra id, entra +1 more Azure Entra ID Elevation of Privilege Vulnerability CVE-2025-55241 10.0 CriticalSeptember 4, 2025
• microsoft dynamics 365 business central 2023, dynamics 365 business central 2024, dynamics 365 business central 2025 +4 more +6 more Microsoft Dynamics Business Central Information Disclosure Vulnerability CVE-2025-29821 5.5 MediumApril 8, 2025
• microsoft dynamics 365 business central, dynamics 365 business central online +1 more Dynamics 365 Business Central Elevation of Privilege Vulnerability CVE-2024-43460 8.1 HighSeptember 17, 2024
• microsoft dynamics 365 business central, dynamics 365 business central 2023 release wave 1, dynamics 365 business central 2023 release wave 2 +1 more +3 more Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability CVE-2024-38225 8.8 HighSeptember 10, 2024
• microsoft entra id, entra +1 more Microsoft Entra ID Elevation of Privilege Vulnerability CVE-2024-43477 7.5 HighAugust 23, 2024
• microsoft dynamics 365 business central, dynamics 365 business central 2023 release wave 1, dynamics 365 business central 2023 release wave 2 +1 more +3 more Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability CVE-2024-35249 8.8 HighJune 11, 2024
• microsoft dynamics 365 business central, dynamics 365 business central 2023 release wave 1, dynamics 365 business central 2023 release wave 2 +1 more +3 more Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability CVE-2024-35248 7.3 HighJune 11, 2024
• microsoft dynamics 365 business central, dynamics 365 business central 2022 release wave 2, dynamics 365 business central 2023 release wave 1 +1 more +3 more Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability CVE-2024-21380 8.0 HighFebruary 13, 2024
• microsoft entra, entra jira sso plugin +1 more Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability CVE-2024-21401 9.8 CriticalFebruary 13, 2024
• microsoft azure active directory, entra +1 more Microsoft Azure Active Directory B2C Spoofing Vulnerability CVE-2024-21381 6.8 MediumFebruary 13, 2024
• microsoft dynamics 365 business central, dynamics 365 business central 2023 release wave 1 +1 more Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability CVE-2023-38167 7.2 HighAugust 8, 2023
• microsoft dynamics 365 business central, dynamics nav, dynamics 365 business central 2019 release wave 2 (on-premise) +12 more +14 more Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability CVE-2022-41127 8.5 HighDecember 13, 2022
• microsoft dynamics 365 business central spring 2019 update, dynamics 365 business central 2019, dynamics 365 business central 2021 +6 more +8 more Microsoft Dynamics Business Central Information Disclosure Vulnerability CVE-2022-41066 4.4 MediumNovember 9, 2022
• microsoft dynamics 365 business central, dynamics 365 business central 2020 release wave 2 – update 17.10, dynamics 365 business central 2021 release wave 1 - update 18.5 +2 more Microsoft Dynamics Business Central Cross-site Scripting Vulnerability CVE-2021-40440 5.4 MediumSeptember 15, 2021
• microsoft dynamics 365 business central spring 2019 update, dynamics 365 business central, dynamics nav +4 more +6 more Microsoft Dynamics Business Central Cross-site Scripting Vulnerability CVE-2021-36946 5.4 MediumAugust 12, 2021
• microsoft dynamics 365 business central, dynamics 365 business central 2020 release wave 1 - update 16.14, dynamics 365 business central 2020 release wave 2 - update 17.8 +1 more +3 more Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability CVE-2021-34474 8.0 HighJuly 14, 2021
• microsoft dynamics 365 business central 2019 release wave 2 (on-premise), dynamics 365 business central, dynamics nav +6 more +8 more Microsoft Dynamics Business Central Cross-site Scripting Vulnerability CVE-2021-1724 6.1 MediumFebruary 25, 2021
• microsoft dynamics 365 business central 2019 release wave 2 (on-premise), dynamics 365 business central 2019 spring update, dynamics 365 business central +7 more +9 more A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka ... CVE-2020-1022 8.0 HighApril 15, 2020
• microsoft dynamics 365 business central 2019 spring update, dynamics 365 business central, dynamics nav +5 more +7 more An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on... CVE-2020-1018 7.5 HighApril 15, 2020
• microsoft dynamics 365 business central 2019 release wave 2 (on-premise), dynamics 365 business central 2019 spring update, dynamics 365 business central +7 more +9 more An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka ... CVE-2020-0905 EPSS 10.8% 8.0 HighMarch 12, 2020