Microsoft discloses maximum severity flaw in Entra ID Cybersecurity Dive