Microsoft Patch Tuesday for May 2025 — Snort rules and prominent vulnerabilities
60
Search: “Windows Remote Desktop Client”
216 stories
60
60
Microsoft Patches a Whopping Seven Zero
60
60
60
Microsoft Patch Tuesday, November 2021 Edition
60
60
60
60
60
60
60
Modified ScreenConnect Clients Used in Worm-Like Campaign
Huntress warns of worm-like attacks using modified ScreenConnect clients to spread VBScript payloads; ConnectWise issued an advisory.
Campaigns starting in late August use social engineering, including Quick Assist abuse, to install rogue ScreenConnect clients that spawn wscript.exe and deploy four VBScript files for reconnaissance, staging, and PowerShell execution. The attackers persist via User Run Keys, attempt UAC bypass, install UltraViewer, and propagate the VBScript chain to other connected ScreenConnect endpoints. ConnectWise published an advisory about a file transfer behavior issue affecting cloud and on-premises ScreenConnect, with a CVE identifier and fix expected within a week; it recommends disabling file transfer meanwhile.
66
60
Microsoft Patch Tuesday for April 2025 — Snort rules and prominent vulnerabilities
60
60
60
April 2020 Patch Tuesday: Microsoft fixes three actively exploited vulnerabilities
60
Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs
Microsoft's record September 2026 Patch Tuesday fixes 974 CVEs, including two exploited Windows privilege-escalation zero-days and 20 wormable bugs.
Microsoft's September 2026 Patch Tuesday fixes a record 974 CVEs, including two actively exploited zero-days: CVE-2026-85880, an ALPC heap buffer overflow, and CVE-2026-81963 in the Windows Update Stack, both CVSS 7.8 local privilege escalations. It also addresses an unauthenticated Exchange RCE (CVE-2026-55007) triggered by Visio attachment content indexing under memory pressure, an RDP use-after-free (CVE-2026-69525, CVSS 9.8), and 20 wormable flaws in DNS, DHCP, SMB, Active Directory, and other components. ZDI attributed the rising volume partly to AI-assisted vulnerability discovery, noting no corresponding spike in active exploits yet.
88
60
60
Microsoft Patch Tuesday for April 2026
60
60
60
60
60
60
Microsoft Issues Updates for 96 Vulnerabilities You Need to Patch this Month
60
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)
60
60
60
60
60
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months
60
60
March 2022 Patch Tuesday: Microsoft fixes RCEs in RDP client, Exchange Server
60
60
60
60