CVE-2026-70352: Azure AI Language Elevation of Privilege Vulnerability
Published Sep 3, 2026
·Updated
Azure AI Language Elevation of Privilege Vulnerability
Other sources
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.
— Microsoft
Affected Software
2 affected components
Microsoft Azure AI Language Authoring
Microsoft Azure AI Language
Event History
Sep 3, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·10:59 PM
Data Sourced
via MITRE·10:59 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability is exploitable over a network without prior authentication, user interaction, or privileges. An unauthorized attacker could elevate privileges.
2
Which Azure AI Language offerings are identified as affected?
The affected software listed is Microsoft Azure AI Language and Microsoft Azure AI Language Authoring.
3
What is the potential impact if exploitation succeeds?
Successful exploitation can result in privilege elevation. The supplied severity vector also indicates potential high confidentiality, integrity, and availability impact, with scope change.