microsoft-identity-web vulnerabilities

CVEs whose affected-version data names the microsoft-identity-web package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-80092Medium· 5.3

yesterday

Microsoft Identity Web Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.

▾ SunlitMicrosoft · microsoft-identity-webvia CVEORG