CVE-2026-65673: Microsoft Entra Connect Elevation of Privilege Vulnerability
CVE-2026-65673 is an elevation of privilege vulnerability in Microsoft Entra Connect, rated Important by Microsoft, with a CVSS 3.1 base score of 7.8 (High). An attacker can exploit it by an attacker with local access, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 0.32% probability of exploitation activity in the next 30 days, higher than 25% of all scored vulnerabilities. Microsoft released the fix on 11 August 2026 in the August 2026 Patch Tuesday. It affects 1 product in 1 product family (Azure).