---
id: 5827
title: "UnOAuthorized: Privilege Elevation Through Microsoft Applications"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/unoauthorized-privilege-elevation-through-microsoft-applications/"
published_at: "2024-08-08T00:03:50Z"
tags: ["vulnerability-research", "privilege-escalation", "entra-id", "detection", "oauth", "msrc", "global-administrator"]
phying_url: "https://phying.com/item/5827"
lang: en
---

# UnOAuthorized: Privilege Elevation Through Microsoft Applications

## Summary

Semperis found Microsoft app permissions in Entra ID could act beyond intended authorization—even adding users to Global Administrator. Fixed via MSRC; covers detecting prior abuse and hardening.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2024-08-08T00:03:50Z
- **Original:** https://www.semperis.com/blog/unoauthorized-privilege-elevation-through-microsoft-applications/
- **Phying News:** https://phying.com/item/5827