60
2026-007: Critical Vulnerability in Windows Netlogon
Actively exploited CVSS 9.8 Windows Netlogon flaw lets unauthenticated attackers execute code with SYSTEM privileges on domain controllers.
Microsoft's May 2026 advisory describes CVE-2026-41089, a stack-based buffer overflow in Windows Netlogon (CVSS 9.8) that allows unauthenticated remote code execution with SYSTEM privileges on domain controllers via specially crafted packets. The Centre for Cybersecurity Belgium reports the flaw is currently being exploited by threat actors. All Windows Server versions from 2012 through 2025 acting as domain controllers are affected and require the May updates.
88
60
November 2020 Patch Tuesday: Microsoft fixes actively exploited Windows Kernel flaw
60
December 2019 Patch Tuesday: Microsoft fixes one actively exploited zero-day
60
60
‘Wormable’ Flaw Leads January 2022 Patch Tuesday
60
Microsoft Fixes Four Actively Exploited Zero
60
March 2019 Patch Tuesday: Microsoft patches two actively exploited Windows flaws
60
Microsoft Patch Tuesday for August 2021 — Snort rules and prominent vulnerabilities
60
Microsoft Issues Patches for In-the-Wild 0
60
Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast
60
60
May 2021 Patch Tuesday: Adobe fixes exploited Reader 0-day, Microsoft patches 55 holes
60
60
60
60
Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarming
60
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
60
60
60
60
Latest Microsoft Windows Updates Patch Dozens of Security Flaws
60
Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited
CISA confirms exploitation of two Windows zero-days among 973 Microsoft patches; 22,000 Exchange servers remain unpatched.
Microsoft's September Patch Tuesday sets a record with 973 vulnerabilities, and CISA confirms CVE-2026-81963 and CVE-2026-85880 are being exploited, giving federal agencies until September 22 to patch. Nightwing estimates over 22,000 corporate Exchange servers are unpatched against weaponized exploit code. Analysts describe CVE-2026-81963 as an early link in ransomware chains where phishing leads to privilege escalation, and note year-to-date Microsoft disclosures exceed 2,600 bugs.
80
60
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero
60
July 2020 Patch Tuesday: Microsoft plugs wormable Windows DNS Server RCE flaw
60
Microsoft Patch Tuesday for September 2025 – Snort rules and prominent vulnerabilities
60
Microsoft September 2020 Patch Tuesday addresses 129 flaws
60
February 2019 Patch Tuesday: PrivExchange hole plugged
60
Microsoft Patches 398 Flaws Including a Windows Driver Zero
Microsoft's August Patch Tuesday fixes 398 CVEs, including actively exploited Windows zero-day CVE-2026-68820 used by Lazarus for SYSTEM privilege escalation.
Microsoft's August 2026 Patch Tuesday release addresses 398 new vulnerabilities, 62 rated Critical by the Zero Day Initiative, with CVE-2026-68820 (CVSS 7.0), a use-after-free in the afd.sys Windows kernel driver, the only flaw flagged as actively exploited. Check Point Research attributed exploitation of the privilege escalation bug to Lazarus' Operation Dream Job campaign. Four unauthenticated remote code execution flaws rated 9.8 affect Windows DNS Server (CVE-2026-62878, called wormable by ZDI), Windows Deployment Services (CVE-2026-62893), Microsoft QUIC (CVE-2026-62815) and HPC Pack (CVE-2026-59124). The release also completes a two-part SharePoint fix with RCE component CVE-2026-63520, following July's authentication bypass fix CVE-2026-55040.
82
Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws
60
Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities
60
Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited
60
60
60
Microsoft patches zero-days used by state-sponsored and ransomware threat actors (CVE-2023-23397, CVE-2023-24880)
60
Microsoft Patch Tuesday for May 2021 fix 4 critical flaws
60
60
60