Microsoft Rolls Out 22 Fresh Security Patches
Microsoft on Thursday announced the rollout of 22 new security updates that resolve severe vulnerabilities across multiple products.
Most of the patches address critical and high-severity flaws in Microsoft Azure, Entra ID, Exchange, Fabric, and Partner Center products.
The most severe of these include elevation of privilege (EoP) bugs in Azure SQL Database (CVE-2026-69502), Azure Arc (CVE-2026-69555 and CVE-2026-65816), and Exchange Online (CVE-2026-65801), and remote code execution (RCE) flaws in Azure Managed Instance for Apache Cassandra (CVE-2026-65770), and Entra ID (CVE-2026-69836), all with a CVSS score of 10/10.
Seven other critical EoP issues were resolved: CVE-2026-68782 (Azure SQL Database), CVE-2026-63509 (Microsoft Fabric), CVE-2026-69851 (Entra ID), CVE-2026-68789 (Azure SQL Database), CVE-2026-69400 (Azure Logic Apps), CVE-2026-62834 (Azure Data Factor), and CVE-2026-66309 (Azure SQL Database).
Additionally, Microsoft patched high-severity vulnerabilities in Azure Virtual Machines, Microsoft Partner Center, Azure Data Factory, Azure Stack HCI, Azure Data Manager for Energy, Copilot in Azure, and Windows...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE