Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

Microsoft released patches for 18 vulnerabilities in Azure cloud services and Copilot AI products. Most are privilege escalation; all fixes are server-side, requiring no customer action. A separate Windows privilege escalation vulnerability (CVE-2026-85921) was also fixed.

• 18 vulnerabilities affected Azure ARC, AI Foundry, Cosmos DB, Fabric, and Microsoft 365 Copilot
• All patches applied on servers, customers need do nothing
• Separately fixed Windows vulnerability CVE-2026-85921
• No exploitation of any vulnerability has been recorded