- 79/2026
- Critical
Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products.
The addressed vulnerabilities could allow the attacker to gain elevated privileges or obtain sensitive information from the affected systems.
Sample of the addressed vulnerabilities:
1. Azure AI Foundry Elevation of Privilege Vulnerability (CVE-2026-32213):
- CVSS: 10
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Gain Privileges
2. Azure MCP Server Information Disclosure Vulnerability (CVE-2026-32211):
- CVSS: 9.1
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Obtain information
Vulnerabilities
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.