CVE-2024-35255

5.5 mediumEPSS 0.8%

Medium (5.5) in microsoft. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in azure-identity 1.16.1.

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Severity

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2024-06-11
Modified: 2026-07-20
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-m5vv-6r4h-3vj9	PyPI	azure-identity	<1.16.1	1.16.1
GHSA-m5vv-6r4h-3vj9	npm	@azure/identity	<4.2.1	4.2.1
GHSA-m5vv-6r4h-3vj9	Maven	com.azure:azure-identity	<1.12.2	1.12.2
GHSA-m5vv-6r4h-3vj9	npm	@azure/msal-node	>=2.7.0 <2.9.2	2.9.2
GHSA-m5vv-6r4h-3vj9	NuGet	Microsoft.Identity.Client	>=4.49.1 <4.60.4	4.60.4
GHSA-m5vv-6r4h-3vj9	Go	github.com/Azure/azure-sdk-for-go/sdk/azidentity	<1.6.0-beta.4.0.20240610221955-50774cd97099	1.6.0-beta.4.0.20240610221955-50774cd97099
GHSA-m5vv-6r4h-3vj9	Maven	com.microsoft.azure:msal4j	>=1.14.4-beta <1.15.1	1.15.1
GHSA-m5vv-6r4h-3vj9	NuGet	Azure.Identity	<1.11.4	1.11.4
GHSA-m5vv-6r4h-3vj9	NuGet	Microsoft.Identity.Client	>=4.61.0 <4.61.3	4.61.3
GO-2024-2918	Go	github.com/Azure/azure-sdk-for-go/sdk/azidentity	<1.6.0	1.6.0
PYSEC-2026-1209	PyPI	azure-identity	<1.16.1	1.16.1