Microsoft VSS: Still Essential, But Not the Whole Story
Huntress details Microsoft VSS limits, including a 64TB cap and ransomware deletion of local snapshots.
32
Product
SQL Server
- Mentions · 7d0
- Mentions · 30d3
- All mentions11
- First seenSep 8, 2026
- Last mentioned16d ago
Timeline
11 articles · newest firstMicrosoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft patched a record 1,413 flaws, including exploited Windows Shell bug CVE-2026-96951 now on CISA’s KEV list.
84
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
Microsoft's October 2026 Patch Tuesday fixes 1,413 CVEs, including an exploited Windows Shell zero-day.
86
AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key
Huntress research shows AD RMS SLC root key is unrotatable and never expires, so its compromise permanently exposes all RMS-protected documents.
58
Microsoft Patch Tuesday, September 2026 Security Update Review
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.
74
Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs
Microsoft's record September 2026 Patch Tuesday fixes 974 CVEs, including two exploited Windows privilege-escalation zero-days and 20 wormable bugs.
88
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft's September Patch Tuesday fixed a record 974 flaws, including two Windows privilege-escalation zero-days actively exploited and added to CISA's KEV catalog.
85
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
Microsoft's September 2026 Patch Tuesday fixes a record 974 CVEs, including two Windows zero-days exploited in the wild for privilege escalation.
85
Microsoft security advisory – September 2026 monthly rollup (AV26-896) – Update 1
Canada's Cyber Centre relays Microsoft's September 2026 rollup; CISA added exploited zero-days CVE-2026-85880 and CVE-2026-81963 to KEV.
65
The September 2026 Security Update Review
ZDI's September 2026 Microsoft update review lists two already-exploited Windows EoP zero-days and dozens of critical RCEs across Office, SQL Server, and Windows services.
58
Microsoft Patch Tuesday Update September 2026 – 974 Vulnerabilities Fixed, Including 2 Zero-Days
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities across Windows and Office, including two actively exploited Windows privilege-escalation zero-days.
88
Related CVEs
by mentions- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-81963<1%7.8Local Privilege Escalation via Link Following in Windows Update Stack
- CVE-2026-695251%9.8Use-After-Free RCE in Windows Remote Desktop Services
- CVE-2026-697301%9.8Use-After-Free RCE in Windows DNS Server
- CVE-2026-65669<1%9.6Injection Flaw in Microsoft SQL Server Enables Network Privilege Escalation
- CVE-2026-55007<1%8.1Double Free Enables Unauthenticated RCE in Microsoft Exchange Server
- CVE-2026-81959<1%7.8Heap Buffer Overflow in Microsoft Excel Allows Local Code Execution (CVE-2026-81959)
- CVE-2026-214131%9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b
- CVE-2026-69465<1%8.8Missing Authorization Allows Authenticated RCE in Microsoft SharePoint Server
- CVE-2026-62906<1%7.4Query Logic Flaw Enables Info Disclosure in Microsoft Discovery Studio
Appears with
- Microsoftvendor · 11
- Windowsproduct · 9
- Exchange Serverproduct · 7
- Microsoft Officeproduct · 6
- Microsoftorganization · 6
- Zero Day Initiativeorganization · 4
- CISAorganization · 4
- Azureproduct · 3
- Tenableorganization · 3
- SharePointproduct · 3
- Huntressorganization · 2
- .NET Frameworkproduct · 2
- Fortraorganization · 2
- Rapid7organization · 2
- Anthropicorganization · 2
- Entra IDproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.