Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4734 articles · 212596 vulns · 37/41 feeds (7d)
← Back to list
10.0
CVE-2026-70352PATCHED
Microsoft · Azure AI Language Authoring

Azure AI Language Elevation of Privilege Vulnerability

Description

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.

Affected Products

VendorProductVersions
MicrosoftAzure AI Language Authoring-

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftentracert_advisory90%
microsoftmicrosoft azure cosmos dbcert_advisory90%
microsoft365 copilotcert_advisory90%
microsoftazurecert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352(vendor-advisory, patch)

Related News (4 articles)

Tier C
Qualys Blog3h ago
Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review
→ No new info (linked only)
Tier B
BSI Advisories4d ago
[NEU] [hoch] Microsoft Clouddienste: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB4d ago
CVE-2026-70352 | Microsoft Azure AI Language Authoring missing authentication
→ No new info (linked only)
Tier A
Microsoft MSRC5d ago
CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352
CWECWE-306
PublishedSep 3, 2026
Last enriched4d ago
Trending Score63
Source articles4
Independent4
Info Completeness7/14
Missing: title, description, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-85880EXPKEV
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Trending: 143
HIGHCVE-2026-81963EXPKEV
Windows Update Stack Elevation of Privilege Vulnerability
Trending: 139
HIGHCVE-2026-63520EXPKEV
Microsoft SharePoint Server Remote Code Execution Vulnerability
Trending: 73
CRITICALCVE-2026-69276
Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability
Trending: 60
CRITICALCVE-2026-69491
Microsoft DirectMusic Remote Code Execution Vulnerability
Trending: 60

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Sep 3, 2026
Discovered by ZDM
Sep 3, 2026
Patch Available
Sep 8, 2026