Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
998Microsoft CVEsreleased Tue 8 Sep
132Critical105 need an update · 27 fixed service-side
2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release
Act first · September 2026
Exploited, KEV-listed, or publicly disclosedPatch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
Showing 3 of 154All critical
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-85889 | Azure AI Foundry Elevation of Privilege VulnerabilityAzure AI Foundry | Critical | 10.0 | 0.7% | EoPNetwork | Service-side fix | |
| CVE-2026-69399 | Azure Arc Elevation of Privilege VulnerabilityAzure Arc | Critical | 9.9 | 0.6% | EoPNetwork | Service-side fix | |
| CVE-2026-83941 | Entra ID Elevation of Privilege VulnerabilityEntra ID | Critical | 9.9 | 0.8% | EoPNetwork | Service-side fix | |
| CVE-2026-85878 | Azure Database for PostgreSQL Elevation of Privilege VulnerabilityAzure Database for PostgreSQL | Critical | 9.9 | 0.8% | EoPNetwork | Service-side fix | |
| CVE-2026-87701 | Azure Cosmos DB Elevation of Privilege VulnerabilityAzure Cosmos DB | Critical | 9.6 | 0.8% | EoPNetwork | Service-side fix | |
| CVE-2026-70009 | Azure Arc Elevation of Privilege VulnerabilityAzure Arc | Critical | 9.3 | 0.5% | EoPNetwork | Service-side fix | |
| CVE-2026-62916 | Microsoft Entra ID Elevation of Privilege VulnerabilityMicrosoft Entra ID | Critical | 9.1 | 0.9% | EoPNetwork | Service-side fix | |
| CVE-2026-68791 | Azure Machine Learning Information Disclosure VulnerabilityAzure Machine Learning | Critical | 8.6 | 0.5% | Information DisclosureNetwork | Service-side fix | |
| CVE-2026-69857 | Azure Cosmos DB Spoofing VulnerabilityAzure Cosmos DB | Critical | 8.5 | 0.6% | SpoofingNetwork | Service-side fix | |
| CVE-2026-83946 | Azure Portal Spoofing VulnerabilityAzure Portal | Critical | 8.2 | 0.3% | SpoofingNetwork | Service-side fix | |
| CVE-2026-85917 | Azure AI Foundry Elevation of Privilege VulnerabilityAzure AI Foundry | Critical | 7.5 | 1.0% | EoPNetwork | Service-side fix | |
| CVE-2026-62906 | Microsoft Discovery Studio Information Disclosure VulnerabilityMicrosoft Discovery Studio | Critical | 7.4 | 0.9% | Information DisclosureNetwork | Service-side fix |