{"action":"Upgrade Microsoft.Identity.Client to 4.59.1 (4.59.x) or 4.60.3 (4.60.x) or later.","affected":[{"fixed":"4.59.1","introduced":"4.48.0"},{"fixed":"4.60.3","introduced":"4.60.0"}],"component":"Microsoft.Identity.Client","cve_ids":["CVE-2024-27086"],"ecosystem":"NuGet","epss":0.00189,"exploited":false,"fixed_versions":["4.59.1","4.60.3"],"ghsa_id":"GHSA-x674-v45j-fwxw","id":"tcs_01M5N94VEZZYFZDM72HS7RCQ7W","modified_at":"2026-09-10T03:50:13.576933407Z","published_at":"2024-04-16T21:41:57Z","references":["https://osv.dev/vulnerability/GHSA-x674-v45j-fwxw","https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/security/advisories/GHSA-x674-v45j-fwxw","https://nvd.nist.gov/vuln/detail/CVE-2024-27086","https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/commit/413e319472ccf48c86647f19fa2aa49ff6038488","https://github.com/AzureAD/microsoft-authentication-library-for-dotnet","https://learn.microsoft.com/en-us/entra/msal/dotnet","https://www.nuget.org/packages/Microsoft.Identity.Client"],"severity":{"label":"low","score":3.9},"sources":[{"source":"osv","source_id":"GHSA-x674-v45j-fwxw","url":"https://osv.dev/vulnerability/GHSA-x674-v45j-fwxw"}],"summary":"MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service"}