Vulnerabilitycritical
Microsoft Patches Record 206 Flaws, Including Three Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-17103 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.0 | 27% | ||
| CVE-2025-10263 | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &… | 9.1 | <1% | ||
| CVE-2026-47291 | Unauthenticated RCE via Integer Overflow in Windows HTTP.sys | 9.8 group max | 23% | ||
| CVE-2026-45585 | Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey" | 6.8 | 2% | PoC ×4 | |
| CVE-2026-45657 | Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network | 9.8 | 15% | ||
| CVE-2026-8863 | Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass | 7.8 | <1% |
From the original article
4 min read at thehackernews.com
Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three flaws that have been publicly disclosed at the time of release. Of the 206 flaws, 39 are rated Critical, and 167 are rated Important in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.