Microsoft patches critical Azure AI Foundry flaw that could escalate privileges
Microsoft fixed a maximum-severity flaw in Azure AI Foundry (CVE-2026-85889, CVSS 10.0) that could let an unauthorized user escalate privileges, with no customer action required. The researcher Rémy Marot was credited, and no exploitation in the wild was reported. Microsoft also patched several other high-severity CVEs across its products and Windows updates, all addressed without user action needed.