Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL Server
60
60
August 2018 Microsoft Patch Tuesday fixes two flaws exploited in attacks in the wild
60
60
Microsoft fixes critical wormable Windows flaw (CVE-2025-47981)
60
China-Linked Hackers Exploit SAP and SQL Server Flaws in Attacks Across Asia and Brazil
60
Microsoft Patch Tuesday, July 2025 Edition
60
60
60
Microsoft Releases Patches for 60 Flaws—Two Under Active Attack
60
60
60
60
60
Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited
60
60
60
60
60
60
Microsoft Patches Record 622 Flaws, Including Two Zero
60
60
Microsoft Patch Tuesday Update September 2026 – 974 Vulnerabilities Fixed, Including 2 Zero-Days
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities across Windows and Office, including two actively exploited Windows privilege-escalation zero-days.
Microsoft's September 2026 Patch Tuesday addresses 974 vulnerabilities spanning Windows, Office, SQL Server, SharePoint, Exchange, Azure, and developer tools. Two Windows zero-days are confirmed exploited in attacks: CVE-2026-85880, a Windows ALPC elevation-of-privilege flaw, and CVE-2026-81963, a Windows Update Stack privilege-escalation flaw involving link following. The release also includes Critical fixes for Windows Secure Kernel Mode, VBS Enclave, Excel, and Word.
88
60
60
60
60
Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs
60
60
Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero
60
Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities
60
Microsoft Patch Tuesday, July 2024 Edition
60
CVE-2026-50522: Patch Critical SharePoint RCE Now
Microsoft patched CVE-2026-50522 (CVSS 9.8), an unauthenticated deserialization RCE in on-premises SharePoint servers, in its July 2026 updates; no exploitation confirmed at disclosure.
CVE-2026-50522 is a critical (CVSS 9.8) deserialization of untrusted data flaw (CWE-502) allowing unauthenticated remote code execution on on-premises Microsoft SharePoint servers. It affects SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition, with fixes shipped in Microsoft's July 14, 2026 security updates; SharePoint Online is not listed as affected. No public evidence of active exploitation of this specific CVE existed at disclosure, though CISA's SSVC judged the attack automatable with total technical impact.
72
Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)
60
60
60
60
60
60
60