CVE detail
CVE-2025-55241
Azure Entra ID Elevation of Privilege Vulnerability
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
4 source links · newest first
- All Microsoft Entra Tenants Were Exposed to Silent Compromise via Invisible Actor Tokens: ResearcherSecurityWeek
The strength of responsible disclosure is that it can solve problems before they are actioned. The weakness is that it potentially generates a false sense of security in the vendor.
newswww.securityweek.comSep 23, 2025, 11:44 AM Security researchers are warning about a max-severity vulnerability in Microsoft Entra ID (formerly Azure Active Directory) that could potentially allow attackers to impersonate any user in any tenant, including Global Administrators, without triggering MFA, conditional Access, or leaving any normal login or audit trail. The flaw, first reported by red-teamer Dirk-jan Mollema, exploited “Actor tokens,” […]
newswww.csoonline.comSep 19, 2025, 11:51 AMNo excerpt available.
Third Party Advisorydirkjanm.ioSep 4, 2025, 11:15 PM- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55241msrc.microsoft.com
No excerpt available.
Vendor Advisorymsrc.microsoft.comSep 4, 2025, 11:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-53958CVSS 7.6 · High
4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubU…
- CVE-2026-50191CVSS 8.8 · High
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, a…
- CVE-2026-15315CVSS 8.7 · High
Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in chal…
- CVE-2026-52793CVSS 8.1 · High
Froxlor is open source server administration software. Prior to 2.3.7, the API authentication path in lib/Froxlor/Api/FroxlorRPC.php and FroxlorRPC::validateAuth accepts an API ke…
- CVE-2026-44472CVSS 8.1 · High
Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownershi…
- CVE-2026-73337CVSS 8.2 · High
Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead to a vector that allows to bypass 2FA checks.