CVE-2026-85885

Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0. "Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,"

Ein Angreifer kann mehrere Schwachstellen in Microsoft Authenticator und Microsoft 365 Copilot ausnutzen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.