src_d11443da85ea659d49
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Aug 07, 2024 00:00 UTC
- Retrieved
- Oct 08, 2026 03:52 UTC
Privilege Elevation Vulnerability in Entra ID
Semperis researchers discovered vulnerabilities in Microsoft applications that allowed privilege elevation in Entra ID beyond expected authorization controls. The most severe finding enabled adding users to privileged roles, including Global Administrator, without proper permissions. The issues affected Device Registration Service, Viva Engage, and Microsoft Rights Management Service. Microsoft ha
Reference details
- Source category
- Research & news
- Report title
Privilege Elevation Vulnerability in Entra ID- First reported
- Aug 07, 2024 00:00 UTC
- Last reported
- Aug 07, 2024 00:00 UTC
- Catalog updated
- Oct 08, 2026 03:52 UTC
- Record ID
b3bd82eb5a19f50bfc3633d03f3d4eab28962811e3bbb1e98ee3a613d11182c8
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Review source update dates and status
- src_d11443da85ea659d49Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.