{"data":{"id":"7a81ece0-2bdd-4b0d-98e7-5f9040d9f049","title":"Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation","summary":"Microsoft released fixes for CVE-2026-85889, a CVSS 10.0 flaw in Azure AI Foundry (also called Microsoft Foundry) that lets an unauthorized attacker over a network elevate privileges because of missing authentication for a critical function. Microsoft credited Rémy Marot with the discovery and said there is no evidence of in-the-wild exploitation. Microsoft also says no customer action is required.","solution":"Microsoft says the vulnerabilities have already been fully mitigated and require no action from users.","labels":["security","industry"],"sourceUrl":"https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html","publishedAt":"2026-09-18T12:47:04.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Azure AI Foundry","Microsoft Foundry","Microsoft 365 Copilot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-18T12:47:04.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}