Authentication Flaw in Azure AI Language by Microsoft
CVE-2026-70352

10CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Ai Language Authoring
Vendor
CVE Published:
3 September 2026

What is CVE-2026-70352?

An authentication weakness in Azure AI Language can be exploited by unauthorized attackers to elevate privileges, potentially compromising network security. This flaw allows attackers to access critical functions without proper authentication, raising concerns about the integrity and safety of user data. It is essential to review the affected versions and apply necessary patches to mitigate this risk effectively.

Affected Version(s)

Azure AI Language Authoring -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.