Search: “exploit”

11,309 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 11360 Exploit / PoC 7848 Ransomware 5757 Malware 4592 Data breach 2526 Threat actor 2004 Policy & legal 1472 Phishing & fraud 1320 Industry 448 Advisory 343 AI safety & security 289 Research 192 Tools 70 AI tools & infra 63

SeverityAll critical 21523 high 8950 medium 5857 low 1572 info 490

Patch Tuesday - September 2026

Microsoft's September 2026 Patch Tuesday fixes 999 CVEs, a record, with two zero-day privilege escalation flaws already exploited in the wild.

Microsoft published 974 own-product vulnerabilities plus 25 non-Microsoft CVEs, totaling 999 — the most CVEs Microsoft has ever released in a single day. Two flaws are exploited in the wild: CVE-2026-85880, an out-of-bounds write in Windows ALPC granting SYSTEM privileges, and CVE-2026-81963, an improper link resolution flaw in the Windows Update Stack also leading to SYSTEM. Chrome's V8 zero-day CVE-2026-85046 was patched in Edge on September 2, but Microsoft had not published a corresponding advisory, leaving uncertainty about other Chromium fixes in Edge. October 14 lifecycle changes end servicing for Windows 11 24H2 Home/Pro, Office 2021, and Exchange Server 2016/2019.

Rapid7 BlogSep 8, 21:44 UTC · 7d agoVulnerability in the wildCVE-2026-85880 CVE-2026-81963 CVE-2026-85046+10 CVEs

Filling a BlackHole

Kaspersky SecurelistSep 9, 20:25 UTC · Sep 9, 2013Vulnerability CVE-2012-5076 CVE-2012-0507 CVE-2013-0422+2 CVEs

Microsoft Targeted by 8 of 10 Top Vulnerabilities in 2018

Recorded FutureAug 11, 00:00 UTC · Aug 11, 2025Vulnerability in the wildCVE-2017-0199 CVE-2016-0189 CVE-2017-8750+8 CVEs

H1 2025 Malware and Vulnerability Trends

Recorded FutureNov 13, 00:00 UTC · Nov 13, 2025Vulnerability in the wild

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

Microsoft's September 2026 Patch Tuesday fixes a record 964 CVEs, including two zero-days actively exploited in the wild.

Microsoft patched a record 964 CVEs in its September 2026 Patch Tuesday release, with 101 rated critical and 824 rated important, making it the largest Patch Tuesday to date. The release includes fixes for two zero-days that were exploited in the wild, with CVE-2026-81963 and CVE-2026-85880 highlighted in the release. Affected products span Windows core components, Office, Exchange, .NET, Visual Studio, Active Directory services (including AD CS and AD FS) and numerous Azure services. Tenable notes the release surpasses July's as the biggest ever.

Tenable BlogSep 8, 18:07 UTC · 7d agoVulnerability in the wildCVE-2026-81963 CVE-2026-858801