Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-80092

Microsoft Identity Web Elevation of Privilege Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft microsoft-identity-web

  • >=4.16.0 <4.16.1 to < 4.16.1affected

Microsoft microsoft-identity-web

  • <3.16.0 to < 3.16.0affected

References