Microsoft breaks Patch Tuesday record with 206 vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-41091 | Link-Following Local Privilege Escalation in Microsoft Defender (Actively Exploited) | 7.8 | 8% | KEVPoC | KEV |
CVE-2026-49160+2 related CVEs | HTTP/2 Resource Exhaustion Denial-of-Service in Microsoft Windows and Windows Server | 7.5 group max | 54% | ||
| CVE-2026-48567 | Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network | 9.8 | 1% |
From the original article
3 min read at cyberscoop.com
Fears and warnings about a roaring flood of error-riddled software have materialized. And the disease is spreading. Microsoft addressed a whopping 206 vulnerabilities lurking in its vast portfolio of business products and foundational systems in this month’s Patch Tuesday update , marking the vendor’s largest monthly batch of security patches on record, according to researchers.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.