← All advisories

Critical severity10.0NVD Advisory· Published Sep 4, 2025· Updated Jun 17, 2026

CVE-2025-55241

CVE-2025-55241

Description

Azure Entra ID Elevation of Privilege Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Microsoft/Azure Entra IDllm-fuzzy
Microsoft/Entra ID
cpe:2.3:a:microsoft:entra_id:-:*:*:*:*:*:*:*
Microsoft/Edgecpe-rescue
Range: -

Patches

Vulnerability mechanics

References

2

dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/nvdTechnical DescriptionThird Party Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55241nvdVendor Advisory

News mentions

2

Critical Flaws Double as Elevation of Privilege Dominates the Cyber Threats – Analysis of Microsoft Vulnerabilities Report 2026
Cyber Security News · Jul 2, 2026
Critical Microsoft Vulnerabilities Doubled: From Exposure to Escalation
BleepingComputer · May 19, 2026