{"data":{"id":"7a81ece0-2bdd-4b0d-98e7-5f9040d9f049","title":"Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation","summary":"Microsoft released patches for a maximum-severity flaw in Azure AI Foundry (an enterprise platform for building and managing generative AI applications) that could let attackers gain unauthorized elevated privileges without authentication, along with several other critical vulnerabilities in Microsoft 365 and Azure services. The company stated that cloud-based vulnerabilities have already been automatically mitigated and require no action from users, while Windows vulnerabilities were addressed through cumulative updates for Windows 11 version 26H1.","solution":"For Azure AI Foundry and other cloud-based vulnerabilities: Microsoft stated they \"have already been fully mitigated, and that they require no action for users to take.\" For Windows vulnerabilities CVE-2026-62721 and CVE-2026-85921: Install the 2026-09 Cumulative Update for Windows 11, version 26H1 (KB5129194) for either arm64-based systems or x64-based systems (version 28000.2956), depending on your system architecture.","labels":["security"],"sourceUrl":"https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html","publishedAt":"2026-09-18T12:47:04.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":[],"issueType":"news","affectedPackages":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Microsoft","Azure AI Foundry","Microsoft 365 Copilot","Azure Database for PostgreSQL","Azure Cosmos DB"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-18T12:47:04.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}