CVE-2026-70352 - Azure AI Language Elevation of Privilege Vulnerability

Back Back to CVE browser

CRITICAL

Azure AI Language Elevation of Privilege Vulnerability

Published Sep 3, 2026

10.0

CRITICAL

CVSS 3.1

EPSS 0.92%

Description

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.

Affected products

Vendor Microsoft Product Azure AI Language Authoring Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Azure AI Language Authoring

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-70793
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352
vendor-advisorypatch

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-70793		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352		vendor-advisorypatch

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Sep 3, 2026

Updated Oct 1, 2026

Reserved Aug 4, 2026

Link CVE-2026-70352

CISA Vulnrichment

Updated Sep 4, 2026

NVD

Status Awaiting Analysis

Modified Sep 8, 2026

Link CVE-2026-70352

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-70352

ENISA EUVD

Assigner microsoft

Published Sep 3, 2026

Updated Oct 1, 2026

Exploited since n/a

Link EUVD-2026-70793

EUVD-2026-70793