CVE-2025-53786 2

Vulnerability (CVE)

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

A critical token validation failure in Microsoft Entra ID, tracked as CVE-2025-55241 and rated CVSS 10.0, could have let attackers impersonate any user including Global Administrators across any tenant, according to researcher Dirk-jan Mollema, who...

Identity & Access Management

Microsoft Patch Tuesday, August 2025 Edition

Cyber Risks Krebs on Security

Microsoft's August 2025 Patch Tuesday fixed more than 100 security flaws across Windows and other software, at least 13 of them rated critical. The batch includes CVE-2025-53786, which lets an attacker pivot from a compromised Exchange Server into Exchange...

Vulnerabilities & Patching