CVE-2026-85921

Microsoft cleared 18 Azure and Copilot vulnerabilities server-side in one out-of-band batch

The bugs sit in 14 named Azure and Copilot services and Microsoft rated all 18 critical, but the fixes were already running in production when the disclosure went out, so tenants cannot install or verify anything themselves.