Elevation of Privilege Vulnerability in Microsoft Entra Connect
CVE-2026-65673

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Entra Connect
Vendor
CVE Published:
11 August 2026

What is CVE-2026-65673?

This vulnerability within Microsoft Entra Connect allows an attacker to elevate their privileges on the system. Exploiting this issue could lead to unauthorized access to sensitive data or system components. Users are urged to apply the necessary security patches as outlined in the vendor advisory to mitigate potential risks.

Affected Version(s)

Microsoft Entra Connect 1.0.0 < 2.6.84.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.