Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Microsoft has patched a critical vulnerability, CVE-2026-85889, in Azure AI Foundry with a CVSS score of 10.0, stemming from missing authentication for a critical function that could allow unauthorized attackers to escalate privileges over the network. The flaw has been mitigated by Microsoft with no customer action required, and there is no evidence of exploitation in the wild. Additional critical vulnerabilities were also patched across Microsoft 365 Copilot, Azure Database for PostgreSQL, Azure Cosmos DB, and Windows components, including locally exploitable privilege escalation flaws.

AI-extracted · verify before operational use