CVE-2026-70352: critical vulnerability in Microsoft Azure AI Language Authoring
Azure AI Language Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. It has an official Brazilian government alert.
ssvc Trackcvss 10epss 0.9%
Official alert in Brazil
Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.
- CISC Gov.br · 09 Sep 2026Boletim do CISC de Vulnerabilidadesread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Azure AI Language AuthoringRelated CVEs — Microsoft Azure AI Language Authoring
In the same product, most dangerous first.