Exploit / PoCcritical
Microsoft Fixes Two Publicly Disclosed Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-21262 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network | 8.8 | 2% | ||
CVE-2026-24294+2 related CVEs | Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally | 7.8 group max | 5% | ||
| CVE-2026-26127 | Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network | 7.5 | 2% |
From the original article
2 min read at infosecurity-magazine.com
In a welcome relief for sysadmins, Microsoft released security updates for just 79 vulnerabilities in this month’s Patch Tuesday yesterday, including two publicly disclosed zero-days. Microsoft categorizes zero-day vulnerabilities as flaws which have either been exploited or disclosed without a patch available.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.