Microsoft Patches Record 622 Flaws, Including Two Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-50522+1 related CVE | Unauthenticated Deserialization RCE in Microsoft SharePoint Server | 9.8 group max | 3% | KEV | KEV |
CVE-2026-57092+1 related CVE | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network | 9.9 group max | <1% | ||
CVE-2026-54117+1 related CVE | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network | 9.8 | 1% | ||
| CVE-2026-55008 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform… | 9.6 | <1% | ||
| CVE-2026-56155 | Local Privilege Escalation in Microsoft Active Directory Federation Services | 7.8 | <1% | KEV | KEV |
| CVE-2026-56164 | Missing Authentication in Microsoft SharePoint Server Allows Privilege Escalation | 9.8 | 1% | KEV | KEV |
From the original article
5 min read at thehackernews.com
Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by its Security Update Guide count, more than triple June's previous high of around 200 . Those two live bugs are the ones to grab first.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.