KLA91257 Multiple vulnerabilities in Microsoft Azure

🗓️ 03 Sep 2026 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 24 Views

Multiple Microsoft Azure flaws enable privilege escalation, info disclosure, and UI spoofing.

Reporter	Title	Published	Views	Family All 64
BDU FSTEC	The vulnerability of the compatibility package for Microsoft Azure Entra ID, related to the absence of authentication, allows a perpetrator to escalate their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service allows attackers to bypass authentication by using a user-controlled key, enabling them to escalate their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure AI Language Authoring service lies in the lack of authentication for critical functions, allowing attackers to escalate their privileges.	14 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Cosmos DB database management system, related to bypassing authentication using a user-controlled key, allows attackers to perform spear-phishing attacks.	14 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Discovery Studio’s research environment arises from the improper elimination of special elements in data queries, allowing an intruder to disclose protected information.	14 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-62906	4 Sep 202604:15	–	circl
Circl	CVE-2026-62916	3 Sep 202623:36	–	circl
Circl	CVE-2026-69857	3 Sep 202623:30	–	circl
Circl	CVE-2026-70352	4 Sep 202600:07	–	circl

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62906
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62916
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69857
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83711
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83941
threats	www.threats.kaspersky.com/en/product/Microsoft-Active-Directory/
threats	www.threats.kaspersky.com/en/product/Microsoft-Azure/
threats	www.threats.kaspersky.com/en/product/Microsoft-Entra-ID/
statistics	www.statistics.securelist.com/

16 Sep 2026 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8 - 10

EPSS0.00942

SSVC

Microsoft Azure Privilege Escalation Information Disclosure UI Spoofing Entra ID Azure Cosmos DB Azure AI Language