A vulnerability that could potentially have led to the compromise of every Entra ID tenant in the world has been patched ...
A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every ...
July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.
"Since the Azure AD Graph API is an older API for managing the core Azure AD / Entra ID service, access to this API could ...
Though patched, the flaw underscores systemic risks in cloud identity systems where legacy APIs and invisible delegation ...
Microsoft is disclosing a vulnerability that allowed hackers to obtain admin access to virtually any cloud instance of ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback