Microsoft Patches 18 Vulnerabilities in AI, Cloud Products
Source SecurityWeek
Mentioned vulnerabilities
Rated High by Threat Radar from the SecurityWeek text
Data as of 18 Sep 2026, 11:01 UTC
What to do
AI-suggested
Microsoft has implemented all fixes server-side for the Azure and AI product vulnerabilities, so customers do not need to take any action for these cloud services. For the Windows privilege escalation vulnerability (CVE-2026-85921), users should apply the available Windows update to remediate the flaw. Customers should monitor official Microsoft advisories for any further guidance.
Description
Microsoft released patches for 18 vulnerabilities affecting Azure cloud and AI-branded products, primarily involving privilege escalation flaws. The vulnerabilities span multiple Azure services and Microsoft 365 Copilot products, with some information disclosure and spoofing issues also addressed. Microsoft rated all vulnerabilities as critical, though CVSS scores vary from medium to high severity. No exploitation in the wild has been reported, and all fixes were implemented server-side, requiring no customer action. Additionally, a Windows privilege escalation vulnerability was patched, with updates required by users. Microsoft continues to see increased vulnerability discovery driven by AI advancements.