CVE-2026-80092
CVE-2026-80092 · Microsoft Identity Web Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.
CVSS 5.3 · Medium · EPSS 0.6% · Fix available
- Published
- Updated
Affected products and versions
microsoft-identity-web
- Versions
- ≥ >=4.16.0 <4.16.1, < 4.16.1: Affected (custom)
Update to 4.16.1
microsoft-identity-web
- Versions
- ≥ <3.16.0, < 3.16.0: Affected (custom)
No fix published