Microsoft patches CVSS 10.0 Azure AI Foundry flaw (CVE-2026-85889)
Microsoft issued an out‑of‑band update that fixes a CVSS 10.0 vulnerability in Azure AI Foundry, also known as Microsoft Foundry. The flaw (CVE‑2026‑85889) allowed an unauthenticated attacker to elevate privileges over a network, but Microsoft said there is no evidence of exploitation and no customer action is required. Security researcher Rémy Marot was credited for discovering the issue.
Key points
- Azure AI Foundry CVE‑2026‑85889 scored 10.0 and allowed unauthenticated privilege escalation
- Microsoft credited researcher Rémy Marot and said no evidence of wild exploitation
- Microsoft patched a record 974 vulnerabilities in September, including two actively exploited Windows bugs
The advisory also listed several other critical patches released at the same time, including CVE‑2026‑85885 and CVE‑2026‑85878 (both CVSS 9.9) affecting Microsoft 365 Copilot and Azure Database for PostgreSQL, and CVE‑2026‑87701 (CVSS 9.6) in Azure Cosmos DB. Earlier in September, Microsoft patched a record 974 vulnerabilities across its portfolio, with two Windows bugs actively exploited in the wild and linked to the BlueMoon exploit kit used by espionage‑aligned actors.
These updates demonstrate Microsoft’s rapid response to high‑severity flaws in its cloud and AI services, aiming to protect enterprise customers from privilege‑escalation attacks.
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
thehackernews.com · 18 September 2026
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required.
The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0.
"Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network," Microsoft said in a Thursday advisory.
Azure AI Foundry, also called Microsoft Foundry, is an enterprise platform designed to build, deploy, and manage generative artificial intelligence (AI) applications and agents.
The Windows maker credited security researcher Rémy Marot (@R_Marot) for discovering and reporting the flaw. There is no evidence that the issue has been exploited in the wild.
Also patched by Microsoft in recent days are a number of other critical flaws -
- CVE-2026-85885 (CVSS score: 9.9) - A command injection vulnerability in Microsoft 365 Copilot that could allow an authorized attacker to elevate privileges over a network
- CVE-2026-85878 (CVSS score: 9.9) - An improper authorization in Azure Database for PostgreSQL that could allow an authorized attacker to elevate privileges over a network
- CVE-2026-87701 (CVSS score: 9.6) - An improper neutralization vulnerability in Azure Cosmos DB that could allow an authorized attacker to elevate privileges over a network
As is typically the case with cloud-based CVEs, Microsoft said the vulnerabilities have already been fully mitigated, and that they require no action for users to take.
Separately, Microsoft has shipped updates for two other vulnerabilities, one of which was originally disclosed last month.
- CVE-2026-62721 (CVSS score: 7.8) - An insufficient granularity of access control in Windows User-Mode Power Service (UMPS) that could allow an authorized attacker to elevate privileges locally and gain SYSTEM privileges.
- CVE-2026-85921 (CVSS score: 8.2) - A double free vulnerability in Windows Secure Kernel Mode that could allow an authorized attacker to elevate privileges locally and gain Virtual Trust Level 1 (VTL1) privileges.
Both flaws have been addressed as part of an out-of-band update for Windows 11, version 26H1 -
- 2026-09 Cumulative Update for Windows 11, version 26H1 for arm64-based Systems (KB5129194) (28000.2956)
- 2026-09 Cumulative Update for Windows 11, version 26H1 for x64-based Systems (KB5129194) (28000.2956)
The disclosure comes as Microsoft patched a record 974 vulnerabilities spanning its software portfolio earlier last week. Two of those defects impacting Windows Advanced Local Procedure Call (ALPC) and the Windows Update Stack have come under active exploitation.
According to reports from Proofpoint and Volexity, the ALPC vulnerability has been chained along with two Google Chrome flaws to develop an exploit kit called BlueMoon that has been weaponized by multiple espionage-aligned threat actors to deliver malicious payloads.
This text was published by thehackernews.com and written by The Hacker News. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us.
More in Enterprise & Industry
All →- Spirit AI expects robot brains to hit ChatGPT-like breakthrough by next year · 2 src
- Anthropic quietly sets up wet lab to advance drug science · 1 src
- Enterprise automation stalls without context and coordination · 1 src
- Novo Nordisk partners with Anthropic to use Claude Science AI for drug discovery · 12 src
- Business leaders at Dreamforce say older AI models are sufficient for today · 1 src
Comments
via GitHub Discussions