CVE-2024-35255: Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Modified

AliasesSUSE-SU-2024:3345-1SUSE-SU-2025:0750-1GHSA-m5vv-6r4h-3vj9+519 more

Published 11-06-2024Last modified 10-08-2026

Vulnerability summary

CVE-2024-35255 is a medium (CVSS 5.5) vulnerability in microsoft authentication_library. EPSS estimates a 0.83% chance of exploitation in the next 30 days, higher than 57.6% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.5/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.83%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 142

MGASA-2026-0147 SUSE-RU-2026:2237-1 CGA-22V2-FXWF-9FR6 CGA-239R-C5F9-FPFJ CGA-23QM-339G-Q5RQ CGA-24W3-C8CQ-57QW+94 more

Showing 100 of 143.

Timeline

11-06-2024
PublishedVulnerability first disclosed.
10-08-2026
Last modifiedVulnerability information updated.

Description

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

CVSS metrics

14 scores · 9 sources · 2 versions

v4.06.8v3.15.5

EPSS trend

Probability

0.83%

Chance of exploitation in the next 30 days

Percentile

58%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.83% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Chainguard200 products

airflow< 2.9.2-r0
airflow-bitnami-compat< 2.9.2-r0
argo-cd-2.11All versions (No fix recorded)
argo-cd-2.13< 2.13.0-r1
argo-cd-2.13-compat< 2.13.0-r1

argo-cd-2.13-repo-server< 2.13.0-r1
argo-events< 1.9.2-r1
argo-events-fips< 1.9.2-r1
argo-workflows< 3.5.7-r2
argo-workflows-fips< 3.5.7-r2
bank-vaults< 1.20.4-r15
bank-vaults-fips< 1.20.4-r12
bank-vaults-template< 1.20.4-r15
bank-vaults-template-fips< 1.20.4-r12
boring-registry< 0.14.0-r3
boring-registry-fips< 0.14.0-r5
buildctl< 0.14.0-r1
buildkitd< 0.14.0-r1
chezmoi< 2.49.0-r1
cluster-autoscaler-1.31< 1.31.5-r1
cluster-autoscaler-1.32< 1.32.0-r1
cluster-autoscaler-1.32-compat< 1.32.0-r1
cluster-autoscaler-fips-1.31< 1.31.2-r0
cluster-autoscaler-fips-1.31-compat< 1.31.2-r0
cluster-autoscaler-fips-1.32< 1.32.0-r1
cluster-autoscaler-fips-1.32-compat< 1.32.0-r1
cortex< 1.17.1-r2
cortex-fips< 1.17.1-r4
cosign< 2.2.4-r6
cosign-fips< 2.2.4-r4
druid< 32.0.1-r1
druid-compat< 32.0.1-r1
external-secrets-fips< 0.9.19-r2
falcoctl< 0.8.0-r2
falcoctl-fips< 0.8.0-r2
fluent-bit-plugin-loki< 3.0.0-r3
flux< 2.3.0-r2
flux-image-reflector-controller< 0.32.0-r3
flux-image-reflector-controller-iamguarded-compat< 0.32.0-r3
flux-kustomize-controller< 1.3.0-r4
flux-kustomize-controller-iamguarded-compat< 1.3.0-r4
flux-source-controller< 1.3.0-r3
flux-source-controller-iamguarded-compat< 1.3.0-r3
flyte< 1.12.0-r3
fulcio< 1.4.5-r4
fulcio-fips< 1.4.5-r5
goreleaser< 2.0.1-r1
grafana-agent-operator< 0.41.1-r1
grafana-mimir< 2.12.0-r2
guac< 0.7.2-r1
guaccsub< 0.7.2-r1
guacgql< 0.7.2-r1
guacingest< 0.7.2-r1
guacone< 0.7.2-r1
harbor-registry< 3.0.0_alpha1-r5
harbor-registry-fips< 3.0.0_alpha1-r5
hugo< 0.127.0-r1
hugo-extended< 0.130.0-r0
k8sgpt< 0.3.32-r3
ksops< 4.3.1-r4
ksops-compat< 4.3.1-r4
kubescape< 3.0.11-r2
loki-2.9< 2.9.8-r3
loki-2.9-logcli< 2.9.8-r3
loki-2.9-loki-canary< 2.9.8-r3
loki-2.9-promtail< 2.9.8-r3
modelmesh-runtime-adapterAll versions (No fix recorded)
nuclei< 3.2.8-r3
opentelemetry-collector< 0.139.0-r0
opentelemetry-collector-contrib< 0.102.0-r4
opentelemetry-collector-contrib-compat< 0.102.0-r4
opentelemetry-collector-contrib-fips< 0.102.0-r1
opentelemetry-collector-fips< 0.103.0-r0
opentelemetry-collector-ocb-fips< 0.103.0-r0
policy-controller< 0.9.0-r4
policy-controller-fips< 0.9.0-r6
policy-controller-tester< 0.9.0-r4
policy-controller-tester-fips< 0.9.0-r6
prometheus-2.51< 2.51.2-r48
prometheus-admission-webhook< 0.74.0-r2
prometheus-admission-webhook-fips< 0.74.0-r3
prometheus-config-reloader< 0.74.0-r2
prometheus-config-reloader-fips< 0.74.0-r3
prometheus-operator< 0.74.0-r2
prometheus-operator-fips< 0.74.0-r3
prometheus-operator-fips-iamguarded-compat< 0.74.0-r3
prometheus-operator-iamguarded-compat< 0.74.0-r2
pulumi< 3.119.0-r1
pulumi-language-go< 3.119.0-r1
pulumi-language-nodejs< 3.119.0-r1
pulumi-language-python< 3.119.0-r1
py3-azure-identity< 1.16.1-r0 | < 1.17.0-r0
py3-cassandra-medusa< 0.21.0-r3
py3-cassandra-medusa-compat< 0.21.0-r3
py3-supported-azure-identity< 1.17.0-r0
py3.10-azure-identity< 1.17.0-r0
py3.11-azure-identity< 1.17.0-r0
py3.12-azure-identity< 1.17.0-r0
py3.13-azure-identity< 1.17.0-r0
rclone< 1.66.0-r5
rclone-compat< 1.66.0-r5
rekor< 1.3.6-r5
rekor-backfill-index< 1.3.6-r5
rekor-cli< 1.3.6-r5
rekor-fips< 1.3.6-r6
rekor-fips-backfill-index< 1.3.6-r6
rekor-fips-cli< 1.3.6-r6
rekor-fips-server< 1.3.6-r6
rekor-server< 1.3.6-r5
request-1276< 0.21.0-r2
request-1276-compat< 0.21.0-r2
restic< 0.16.4-r11
restic-compat< 0.16.4-r11
restic-fips< 0.16.4-r10
restic-fips-compat-fips< 0.16.4-r10
rook< 1.14.5-r2
rook-oci-compat< 1.14.5-r2
secrets-store-csi-driver-provider-azure< 1.5.2-r3
sigstore-scaffolding< 0.7.1-r2
sigstore-scaffolding-cloudsqlproxy< 0.7.1-r2
sigstore-scaffolding-ctlog-createctconfig< 0.7.1-r2
sigstore-scaffolding-ctlog-managectroots< 0.7.1-r2
sigstore-scaffolding-ctlog-verifyfulcio< 0.7.1-r2
sigstore-scaffolding-fips< 0.7.1-r2
sigstore-scaffolding-fips-cloudsqlproxy< 0.7.1-r2
sigstore-scaffolding-fips-ctlog-createctconfig< 0.7.1-r2
sigstore-scaffolding-fips-ctlog-managectroots< 0.7.1-r2
sigstore-scaffolding-fips-ctlog-verifyfulcio< 0.7.1-r2
sigstore-scaffolding-fips-fulcio-createcerts< 0.7.1-r2
sigstore-scaffolding-fips-getoidctoken< 0.7.1-r2
sigstore-scaffolding-fips-rekor-createsecret< 0.7.1-r2
sigstore-scaffolding-fips-trillian-createdb< 0.7.1-r2
sigstore-scaffolding-fips-trillian-createtree< 0.7.1-r2
sigstore-scaffolding-fips-trillian-updatetree< 0.7.1-r2
sigstore-scaffolding-fips-tsa-createcertchain< 0.7.1-r2
sigstore-scaffolding-fips-tuf-createsecret< 0.7.1-r2
sigstore-scaffolding-fips-tuf-server< 0.7.1-r2
sigstore-scaffolding-fulcio-createcerts< 0.7.1-r2
sigstore-scaffolding-getoidctoken< 0.7.1-r2
sigstore-scaffolding-rekor-createsecret< 0.7.1-r2
sigstore-scaffolding-trillian-createdb< 0.7.1-r2
sigstore-scaffolding-trillian-createtree< 0.7.1-r2
sigstore-scaffolding-trillian-updatetree< 0.7.1-r2
sigstore-scaffolding-tsa-createcertchain< 0.7.1-r2
sigstore-scaffolding-tuf-createsecret< 0.7.1-r2
sigstore-scaffolding-tuf-server< 0.7.1-r2
sops< 3.8.1-r9
spire-agent< 1.9.6-r2
spire-agent-fips< 1.9.6-r3
spire-oidc-discovery-provider< 1.9.6-r2
spire-oidc-discovery-provider-fips< 1.9.6-r3
spire-server< 1.9.6-r2
spire-server-fips< 1.9.6-r3
sqlpad< 7.4.3-r0
sqlpad-compat< 7.4.3-r0
step< 0.26.1-r3
step-ca< 0.26.1-r3
step-ca-fips< 0.26.2-r1
step-fips< 0.26.2-r0
tekton-chains< 0.21.1-r1
tekton-chains-fips< 0.21.1-r1
tempo< 2.5.0-r3
tempo-cli< 2.5.0-r3
tempo-query< 2.5.0-r3
tempo-vulture< 2.5.0-r3
terragrunt< 0.59.2-r0
thanos< 0.35.1-r2
thanos-fips< 0.35.1-r3
thanos-fips-iamguarded-compat< 0.35.1-r3
thanos-iamguarded-compat< 0.35.1-r2
timestamp-authority< 1.2.2-r9
timestamp-authority-cli< 1.2.2-r9
timestamp-authority-fips< 1.2.2-r9
timestamp-authority-fips-cli< 1.2.2-r9
timestamp-authority-fips-server< 1.2.2-r9
timestamp-authority-server< 1.2.2-r9
tkn< 0.37.0-r2
tkn-fips< 0.37.0-r2
trino< 452-r0
trino-config< 452-r0
trino-oci-entrypoint< 452-r0
trino-plugin-ai-functions< 452-r0
trino-plugin-bigquery< 452-r0
trino-plugin-blackhole< 452-r0
trino-plugin-cassandra< 452-r0
trino-plugin-clickhouse< 452-r0
trino-plugin-delta-lake< 452-r0
trino-plugin-druid< 452-r0
trino-plugin-duckdb< 452-r0
trino-plugin-elasticsearch< 452-r0
trino-plugin-exasol< 452-r0
trino-plugin-exchange-filesystem< 452-r0
trino-plugin-exchange-hdfs< 452-r0
trino-plugin-faker< 452-r0
trino-plugin-functions-python< 452-r0
trino-plugin-geospatial< 452-r0
trino-plugin-google-sheets< 452-r0
trino-plugin-hive< 452-r0
trino-plugin-http-event-listener< 452-r0
trino-plugin-http-server-event-listener< 452-r0