ByteOS Network

CVE Vulnerability Details :

CVE-2026-33843

PUBLISHED

More Info Official Page

Assigner-microsoft

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-22 May, 2026 | 22:03

Updated At-22 May, 2026 | 22:03

▼CVE Numbering Authority (CNA)

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Vendor

Microsoft Corporation

Product

Microsoft Entra

Versions

Affected

Problem Types

Type	CWE ID	Description
CWE	CWE-288	CWE-288: Authentication Bypass Using an Alternate Path or Channel

Type: CWE

CWE ID: CWE-288

Description: CWE-288: Authentication Bypass Using an Alternate Path or Channel

Metrics

Version	Base score	Base severity	Vector
3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Version: 3.1

Base score: 9.1

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

Hyperlink	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33843	vendor-advisory patch

Hyperlink: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33843

Resource:

vendor-advisory

patch

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References