Microsoft Microsoft Authentication Library

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-840031.0.0 – < 5.6.0Microsoft Authentication Library (MSAL) for Node.js Spoofing VulnerabilityHIGH 7.40.6 %
CVE-2024-35255Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege VulnerabilityMEDIUM 5.50.8 %