CVE details

CVE-2026-32208

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network.

• Severity: High
• CVSS: 8.8
• Published: 2026-06-19

Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network.

Affected products

• Microsoft Edge

Overlaps: Microsoft Edge

Source

View on NVD

Check if your browser is affected