Microsoft ships largest Patch Tuesday on record, with one bug under active attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-41091 | Link-Following Local Privilege Escalation in Microsoft Defender (Actively Exploited) | 7.8 | 8% | KEVPoC | KEV |
| CVE-2026-45657 | Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network | 9.8 | 15% | ||
| CVE-2026-50507 | Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack | 6.8 | 5% |
From the original article
4 min read at therecord.media
Microsoft on Tuesday released fixes for more than 200 security flaws, the largest Patch Tuesday in the program's history in the latest sign of how artificial intelligence is reshaping vulnerability discovery.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.