Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero
60
Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities
60
Microsoft Patch Tuesday, July 2024 Edition
60
CVE-2026-50522: Patch Critical SharePoint RCE Now
Microsoft patched CVE-2026-50522 (CVSS 9.8), an unauthenticated deserialization RCE in on-premises SharePoint servers, in its July 2026 updates; no exploitation confirmed at disclosure.
CVE-2026-50522 is a critical (CVSS 9.8) deserialization of untrusted data flaw (CWE-502) allowing unauthenticated remote code execution on on-premises Microsoft SharePoint servers. It affects SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition, with fixes shipped in Microsoft's July 14, 2026 security updates; SharePoint Online is not listed as affected. No public evidence of active exploitation of this specific CVE existed at disclosure, though CISA's SSVC judged the attack automatable with total technical impact.
72
Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)
60
42
60
60
60
60
60
45
55
30
57
60
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
Microsoft's September 2026 Patch Tuesday fixes 973 vulnerabilities, including 113 critical, with two Windows privilege-escalation bugs (CVE-2026-81963, CVE-2026-85880) exploited in the wild.
Microsoft's September 2026 security update addresses 973 vulnerabilities across its product lineup, 113 rated critical, of which 82 are remote code execution flaws. Two vulnerabilities are confirmed exploited in the wild: CVE-2026-81963, an elevation-of-privilege flaw in the Windows Update Stack (CVSS 7.8), and CVE-2026-85880, a heap-based buffer overflow in Windows Advanced Local Procedure Call (CVSS 7.8). Microsoft flags several bugs as more likely to be exploited, including a 9.8 RCE in Windows DNS Server (CVE-2026-69730), an 8.8 RCE in Windows Kerberos (CVE-2026-69676), and a 9.0 EoP in Spring Cloud Azure (CVE-2026-69854). Cisco Talos published accompanying Snort rules to detect exploitation attempts against the prominent flaws.
78
Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarming
60
60
30
30
60
60
30
30
60
30
47
60
60
60
Microsoft Patch Tuesday security updates for November 2024 fix two actively exploited zero
60
57
55
45
Week in review: GitLab account takeover flaw, attackers exploiting Ivanti Connect Secure zero-days
60
30
42
30
Microsoft Patch Tuesday, November 2024 Edition
60