CVE-2026-108469

Microsoft Authentication Library for JavaScript cross-site scripting in web page generation

medium · 6.8

Fix listed

Microsoft Authentication Library for JavaScript

Published Nov 10, 2026, 18:20 UTC

Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authentication Library for JavaScript allows an unauthorized attacker to perform spoofing over a network.

Reported fixed versions

5.21.0

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.