Microsoft on pace to break annual vulnerability record as AI
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-41089 | Unauthenticated Stack Buffer Overflow RCE in Windows Server Netlogon (CVE-2026-41089) | 9.8 | 78% | PoC ×6 | |
| CVE-2026-41096 | Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network | 9.8 | 3% | PoC | |
| CVE-2026-42898 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network | 9.9 | 1% |
From the original article
4 min read at therecord.media
Microsoft on Tuesday issued patches for more than 130 security vulnerabilities, putting it on pace to break its own annual record, with the company's security leadership acknowledging that AI tools are driving a surge in vulnerability discovery across the industry.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.