August 2018 Patch Tuesday: Microsoft fixes two actively exploited zero-days
60
Week in review: VirusTotal data leak, Citrix NetScaler zero-day exploitation
60
60
60
Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)
60
60
60
60
45
60
60
60
60
IT threat evolution Q2 2022
60
60
60
Microsoft patches zero-day exploited by attackers (CVE-2023-28252)
60
Microsoft fixes record 964 flaws, including 2 exploited zero-days
Microsoft's September Patch Tuesday fixes a record 964 CVEs, including two actively exploited Windows privilege-escalation zero-days, CVE-2026-81963 and CVE-2026-85880.
Microsoft's September 2026 Patch Tuesday addresses 964 customer-patchable CVEs (104 Critical, 860 Important), the largest release on record, out of 974 total listed. Two actively exploited zero-days are fixed: CVE-2026-81963, a link-following elevation-of-privilege flaw in the Windows Update Stack, and CVE-2026-85880, a Windows ALPC heap overflow enabling AppContainer sandbox escape, both with CVSS 7.8. Both zero-days were exploited before a patch was available and grant SYSTEM-level access after an initial foothold. The release also includes high-severity RCE fixes for Windows DNS Server, Remote Desktop Services, Exchange Server, SharePoint, and SQL Server.
86
60
Microsoft fixes exploited zero-day in Windows Support Diagnostic Tool (CVE-2022-34713)
60
Microsoft patches actively exploited Exchange, Excel zero-days (CVE-2021-42321, CVE-2021-42292)
60
60
60
60
60
Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws
60
50
Microsoft patches actively exploited Windows zero-day (CVE-2021-40449)
60
US CISA added 17 flaws to its Known Exploited Vulnerabilities Catalog
60
60
60
60
60
Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)
60
60
63 New Flaws (Including 0
60
60
60
August 2018 Microsoft Patch Tuesday fixes two flaws exploited in attacks in the wild
60
ToolShell: Details of CVEs affecting SharePoint servers
60