Microsoft Patch Tuesday updates for January 2025 fixed three actively exploited flaws
60
Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited
60
Microsoft Patch Tuesday for July 2024 fixed 2 actively exploited zero
60
Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)
60
55
Microsoft Patch Tuesday for March 2024 fixed 59 flaws
60
60
55
30
Patch Tuesday for August 2022 fixed actively exploited zero
60
Microsoft’s Final Patch Tuesday Fixes Follina Bug
60
60
Microsoft March 2022 Patch Tuesday updates fix 89 vulnerabilities
60
60
Microsoft Patch Tuesday for May 2021 fix 4 critical flaws
60
Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws
60
55
60
60
60
30
Microsoft Issues Software Updates for 17 Critical Vulnerabilities
60
Microsoft Patches Two Zero
60
42
60
60
60
60
Microsoft Releases Emergency Windows 11 Update Following Patch Tuesday Bugs
Microsoft issued emergency Windows 11 update KB5129195 to fix Patch Tuesday regressions and fully close the CVE-2026-62721 privilege escalation flaw.
Microsoft shipped out-of-band cumulative update KB5129195 for Windows 11 24H2 and 25H2 (builds 26100.9457 and 26200.9457) after the September 8 Patch Tuesday rollup, which addressed over 960 CVEs including two actively exploited flaws, broke Remote Desktop Services, Hyper-V Plan9 folder sharing, and USB audio. The emergency release also strengthens the incomplete fix for CVE-2026-62721, an elevation-of-privilege flaw in the Windows User-Mode Power Service that could let a local attacker gain SYSTEM privileges. Companion patches cover Windows 11 26H1, Windows 10, and Windows Server. Some USB Audio Class 1.0 and AMD Radeon graphics issues remain unresolved.
70
VU#687587: AOMEI Backupper amwrtdrv.sys local privilege escalation vulnerability allows arbitrary writes to physical disks
AOMEI Backupper 8.4.0 driver flaw CVE-2026-12780 lets unprivileged users write physical disks and execute UEFI code, bypassing HVCI and EDR.
CERT/CC issued VU#687587 for CVE-2026-12780, an incorrect permission assignment (CWE-732) in the amwrtdrv.sys kernel driver shipped with AOMEI Backupper 8.4.0. The driver exposes a world-accessible device object without a security descriptor, allowing any unprivileged user to write arbitrary physical disk sectors; with Secure Boot disabled, an attacker can modify the GPT and inject a UEFI payload that executes before the OS loads, bypassing HVCI, EDR, Windows Defender and Hyper-V isolation. On TPM-only BitLocker configurations the attack can capture Volume Master Key material during pre-boot. AOMEI has shipped patches; users who cannot update should uninstall the software or disable the amwrtdrv.sys service, and enabling Secure Boot adds defense in depth.
62
42
60
Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws
60
Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days
60
30
55
Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities
60
60
57
Microsoft Patch Tuesday for July 2025 — Snort rules and prominent vulnerabilities
60