Microsoft patches max severity code execution, privilege escalation flaws

What happened

Microsoft has patched multiple maximum-severity vulnerabilities in Entra ID, Azure Arc, and Exchange Online that allowed attackers to gain remote code execution and escalate privileges. [...]

Why it matters

The incident may affect operational continuity, asset safety or trust around Microsoft. Watch for verified scope and remediation.

Affected entities

View evidence

2 reports · 1 original report · 2 independent

1. BleepingComputerPrimary source · Supports · EN · 100%
   Microsoft patches max severity code execution, privilege escalation flaws ↗Aug 21, 2026, 7:04 AM
2. The Hacker NewsIndependent · Supports · EN · 100%
   Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution ↗Aug 21, 2026, 2:06 AM

Claims

• Microsoft patches max severity code execution, privilege escalation flaws Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

1. August 21, 2026 at 2:06 AMFirst reported
2. Aug 21, 2026, 8:21 AMCorroborated · 81/71%
3. Aug 22, 2026, 3:06 AMCorroborated · 69/72%

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation