Microsoft patches critical Entra ID flaw with a perfect 10 severity score

Microsoft has patched a critical security flaw in its Entra ID service that earned the maximum possible severity score of 10 out of 10. The vulnerability could have allowed attackers to execute code remotely. Microsoft says it fixed the bug before publishing the CVE and found no evidence it was ever exploited in the wild.