Microsoft Fixes 'Perfect 10' Exploit That Could Have Let Hackers Run Code Remotely

August 22, 2026

The Entra ID flaw earned the highest possible severity score, but Microsoft says it patched the bug before publishing the CVE and found no evidence it was ever exploited.