Microsoft Security Updates – 21 June 2026

The addressed vulnerabilities could allow the attacker to gain elevated privileges, perform spoofing attacks, obtain sensitive information, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Azure Active Directory Elevation of Privilege Vulnerability (CVE-2026-45480):

• CVSS: 10
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Privileges

2. M365 Copilot Information Disclosure Vulnerability (CVE-2026-54130):

• CVSS: 9.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Obtain information

Sample of the affected products:

• Microsoft Exchange Online.
• Microsoft Malware Protection Engine.
• Azure Active Directory.
• Microsoft 365 Copilot.
• Microsoft Dynamics 365.
• Dynamics 365 Customer Voice.
• Azure Synapse.
• Azure AI Bot Service.