Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Summary
Microsoft released patches for a maximum-severity flaw in Azure AI Foundry (an enterprise platform for building and managing generative AI applications) that could let attackers gain unauthorized elevated privileges without authentication, along with several other critical vulnerabilities in Microsoft 365 and Azure services. The company stated that cloud-based vulnerabilities have already been automatically mitigated and require no action from users, while Windows vulnerabilities were addressed through cumulative updates for Windows 11 version 26H1.
Solution / Mitigation
For Azure AI Foundry and other cloud-based vulnerabilities: Microsoft stated they "have already been fully mitigated, and that they require no action for users to take." For Windows vulnerabilities CVE-2026-62721 and CVE-2026-85921: Install the 2026-09 Cumulative Update for Windows 11, version 26H1 (KB5129194) for either arm64-based systems or x64-based systems (version 28000.2956), depending on your system architecture.
Classification
Affected Vendors
Related Issues
Original source: https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html
First tracked: September 18, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 95%