On Thursday, Microsoft implemented security patches for 18 vulnerabilities across its Azure cloud services and Copilot AI products. These updates primarily address elevation of privilege vulnerabilities in various Azure services and Microsoft 365 offerings.
Addressing Critical Security Flaws
The majority of the security issues identified were related to privilege escalation, impacting services such as Azure ARC, Azure AI Foundry, Azure Logic Apps, Azure Billing, Azure HorizonDB, Azure Cosmos DB, Azure Container Registry, Microsoft Fabric, Microsoft Dataverse, and Microsoft 365 Copilot. Additionally, information disclosure issues were rectified in several Copilot services and Azure Machine Learning.
A spoofing vulnerability in the Azure Portal was also addressed. Despite all vulnerabilities being deemed critical by Microsoft, the CVSS scores suggest that they range in severity from high to medium.
External and Internal Discoveries
Microsoft credited several external researchers for reporting these vulnerabilities, while others were identified within the company. Importantly, none of these vulnerabilities have been actively exploited, and fixes have been applied server-side, eliminating the need for user intervention.
In another announcement, Microsoft disclosed a privilege escalation flaw affecting Windows, tracked as CVE-2026-85921. Users are required to update their systems to mitigate this issue, which Microsoft considers ‘less likely’ to be exploited.
Ongoing Commitment to Security
The rise in vulnerability discoveries is attributed to the growing integration of advanced AI technologies. In a recent Patch Tuesday release, Microsoft addressed a record 970 vulnerabilities across its products. This surge highlights the company’s ongoing commitment to cybersecurity and proactive measures to protect its users.
As the tech giant continues to enhance its security protocols, the focus remains on safeguarding user data and maintaining robust defenses against potential threats.
For more on Microsoft’s security updates and AI developments, stay tuned to our tech news coverage.
