CVE-2021-36949: Microsoft Azure Active Directory Connect

High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

Affected products

• Microsoft Azure Active Directory Connect: from 1.3.20.0, up to and including 1.6.11.3; from 2.0.3.0, up to and including 2.0.9.0
• Microsoft Azure Active Directory Connect Provisioning Agent: before 1.1.582.0 (fixed in 1.1.582.0)

Published 2021-08-12. Last modified 2026-08-10.