BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-02-03

Assigner: Microsoft Corporation

Description

Azure Entra ID Elevation of Privilege Vulnerability

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-22

Last Modified

2026-02-03

Generated

2026-07-06

AI Q&A

2026-01-23

EPSS Evaluated

2026-07-05

NVD

CVE-2026-24305

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	entra_id	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Impact Analysis

An attacker exploiting this vulnerability could gain elevated privileges, potentially leading to unauthorized access to sensitive data or systems, compromising confidentiality and integrity.

Executive Summary

This vulnerability is an Elevation of Privilege issue in Azure Entra ID, which means an attacker could exploit it to gain higher-level permissions than intended.

Hi! I’m here to help you understand CVE-2026-24305. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70