Microsoft Identity Web Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-80092
Assessment context
Microsoft states that customer action is required
No access to your tenant or devices. Every item links to its source. What this means
Week 42 · 12 Oct – 18 Oct 2026 UTC · assess the changes, then plan the next dates.
SecurityMicrosoft Identity Web Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-80092
Microsoft states that customer action is required
CommunityAli Tajran
Community post · Ali Tajran
CommunityAskWoody
Community post · AskWoody
CommunityOffice 365 for IT Pros (Tony Redmond)
Community post · Office 365 for IT Pros (Tony Redmond)
CommunityPetri IT Knowledgebase2 source records
Community post · Petri IT Knowledgebase
Community post · Petri IT Knowledgebase
Known issuesAzure DevOps
Known issuesCommercial changes / Windows
Product Terms · Microsoft Product Terms — MCA
Known issuesCommercial changes5 source records
Product Terms · Microsoft Product Terms — MCA
Partner announcement · Microsoft Partner Center announcements
Product Terms · Microsoft Product Terms — MCA
Product Terms · Microsoft Product Terms publications
Partner announcement · Microsoft Partner Center announcements
Known issuesGitHub
Service incident
Known issuesOpenAI
Known issuesPalo Alto Networks
Service incident
United States - Americas, United States, AI Runtime Security Cloud
Updates and guidance.NET
Product news · Microsoft .NET Blog
Updates and guidanceAmazon Web Services · AMAZON · GLOBAL
Changed list
Changed list: 256 IPv4 addresses newly covered.
Changed list: 256 IPv4 addresses newly covered.
Updates and guidanceAmazon Web Services · AMAZON · af-south-1
Changed list
Changed list: 256 IPv4 addresses and 1 IPv6 range newly covered.
Changed list: 256 IPv4 addresses and 1 IPv6 range newly covered.
Updates and guidanceAmazon Web Services · AMAZON · ap-southeast-1
Changed list
Changed list: 1 IPv6 range newly covered.
Changed list: 1 IPv6 range newly covered.
Updates and guidanceAmazon Web Services · AMAZON · ap-southeast-3
Changed list
Changed list: 256 IPv4 addresses newly covered.
Changed list: 256 IPv4 addresses newly covered.
Updates and guidanceAmazon Web Services · AMAZON · ca-central-1
Changed list
Changed list: 1 IPv6 range newly covered.
Changed list: 1 IPv6 range newly covered.
Updates and guidanceAmazon Web Services · AMAZON · eu-north-1
Changed list
Changed list: 1 IPv4 address and 1 IPv6 range newly covered.
Changed list: 1 IPv4 address and 1 IPv6 range newly covered.
Updates and guidanceAmazon Web Services · AMAZON · eu-south-1
Changed list
Changed list: 1 IPv6 range newly covered.
Changed list: 1 IPv6 range newly covered.
Updates and guidanceAmazon Web Services · AMAZON · eu-west-2
Changed list
Changed list: 256 IPv4 addresses newly covered.
Changed list: 256 IPv4 addresses newly covered.
Updates and guidanceAmazon Web Services · AMAZON · eusc-de-east-1
Changed list
Changed list: 768 IPv4 addresses and 1 IPv6 range newly covered.
Changed list: 768 IPv4 addresses and 1 IPv6 range newly covered.
Updates and guidanceAmazon Web Services · AMAZON · sa-east-1
Changed list
Changed list: 1 IPv6 range newly covered.
Changed list: 1 IPv6 range newly covered.
Updates and guidanceAmazon Web Services · AMAZON · us-east-1
Changed list
Changed list: same addresses, prefixes rewritten.
Changed list: same addresses, prefixes rewritten.
Updates and guidanceAmazon Web Services · AMAZON · us-east-2
Changed list
Changed list: 1 IPv6 range newly covered.
Changed list: 1 IPv6 range newly covered.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.