Known Vulnerabilities for Microsoft-identity-web by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Microsoft-identity-web" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105763 json | Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQL con... | Not Provided | 2026-10-06 | 2026-10-08 |
| CVE-2026-104040 json | A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes ar... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-101042 json | Parse Server is an open-source backend server. In versions >= 9.0.0 < 9.10.1-alpha.10 and >= 8.0.2 < 8.6.91, the code-based a... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-93853 json | Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman t... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-84458 json | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initi... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-80092 json | Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-63466 json | Unleash is an open-source feature management platform. Prior to 8.0.3, FeatureEventFormatterMd.format in src/lib/addons/featu... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-60998 json | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Direc... | Not Provided | 2026-08-18 | 2026-08-21 |
| CVE-2026-50191 json | 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2024-35255 json | Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability | Not Provided | 2024-06-11 | 2026-07-20 |