YR SoftwareYuri Reissaus

← Back to 2026-Nov

Microsoft Azure File Sync Elevation of Privilege Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely CVE-2026-118288 · score 7/10

What could go wrong?

Someone who already has a normal account could give themselves full admin rights.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

Azure File Sync v23, Azure File Sync v21, Azure File Sync v22

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: no KB article listed. Official page.