Two CVSS 10.0 Flaws in Microsoft Cloud and Active Elementor Pro Exploit
Two CVSS 10.0 Flaws in Microsoft Cloud and Active Elementor Pro Exploit
On 3 September 2026, the National Vulnerability Database published two critical vulnerabilities in Microsoft’s cloud infrastructure, each scoring CVSS 10.0. CVE-2026-70352 affects Azure AI Language and allows unauthenticated privilege escalation. CVE-2026-83711 targets Azure Active Directory B2C with an authorisation bypass. A third flaw, CVE-2026-62916, scored CVSS 9.1 for an authentication bypass in Microsoft Entra ID. These vulnerabilities sit within the identity and authentication layers used by millions of UK small…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.