AzureAD
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| azure-activedirectory-identitymodel-extensions-for-dotnet | 1 | – | Jan 10, 2024 |
| microsoft-authentication-library-for-dotnet | 1 | – | Apr 16, 2024 |
| microsoft-identity-web | 1 | – | Apr 9, 2025 |
Exploited and recent CVEs
- CVE-2025-32016 Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs <0.1%
- CVE-2024-27086 MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service 0.2%
- CVE-2024-21643 Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability 2.2%