Vulnerability in Microsoft azure-keyvault-administration

[ Description ]Official description

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.

[ Fixes ]Fixes and patches

• Security bulletin: Microsoft Azure CVE-2026-69877Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69877, cited by CERT-FR CERTFR-2026-AVI-1315
• Security bulletin: Microsoft Azure CVE-2026-85891Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85891, cited by CERT-FR CERTFR-2026-AVI-1315
• Security bulletin: Microsoft Azure CVE-2026-88132Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88132, cited by CERT-FR CERTFR-2026-AVI-1315
• Security bulletin: Microsoft Azure CVE-2026-85922Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85922, cited by CERT-FR CERTFR-2026-AVI-1315
• Security bulletin: Microsoft Azure CVE-2026-100207Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100207, cited by CERT-FR CERTFR-2026-AVI-1315
• Security bulletin: Microsoft Azure CVE-2026-85925Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85925, cited by CERT-FR CERTFR-2026-AVI-1315
• Security bulletin: Microsoft Azure CVE-2026-96204Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96204, cited by CERT-FR CERTFR-2026-AVI-1315
• Security bulletin: Microsoft Azure CVE-2026-88094Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88094, cited by CERT-FR CERTFR-2026-AVI-1315

[ Advisories ]Government CERT advisories

• CERT-FR14 Oct 2026CERTFR-2026-AVI-1315

  Multiple vulnerabilities in Microsoft Azure Translated from French

  Multiple vulnerabilities have been discovered in Microsoft Azure. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.

  CVE-2026-88094CVE-2026-100207CVE-2026-88132+5 more CVEs
• BSI CERT-Bund13 Oct 2026WID-SEC-2026-3916

  Microsoft Office products: Multiple vulnerabilities allow privilege escalation Translated from German

  CVE-2026-108433CVE-2026-97743CVE-2026-97011+209 more CVEs
• NCSC-NL13 Oct 2026NCSC-2026-0422

  Vulnerabilities fixed in Microsoft Office Translated from Dutch

  Probability/damage M/HCVE-2026-100209CVE-2026-100210CVE-2026-100211+171 more CVEs
• NCSC-NL13 Oct 2026NCSC-2026-0421

  Vulnerabilities fixed in Microsoft Azure Translated from Dutch

  Probability/damage M/HCVE-2026-85922CVE-2026-85925CVE-2026-88132+9 more CVEs

[ References ]References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85925Vendor Advisory