60
60
60
60
Adobe issued security patches for 9 Flash Player flaws reported via ZDI
60
Microsoft Patches Record 622 Flaws, Including Two Zero
60
Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month
60
60
60
60
60
60
60
Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs
Microsoft's record September 2026 Patch Tuesday fixes 974 CVEs, including two exploited Windows privilege-escalation zero-days and 20 wormable bugs.
Microsoft's September 2026 Patch Tuesday fixes a record 974 CVEs, including two actively exploited zero-days: CVE-2026-85880, an ALPC heap buffer overflow, and CVE-2026-81963 in the Windows Update Stack, both CVSS 7.8 local privilege escalations. It also addresses an unauthenticated Exchange RCE (CVE-2026-55007) triggered by Visio attachment content indexing under memory pressure, an RDP use-after-free (CVE-2026-69525, CVSS 9.8), and 20 wormable flaws in DNS, DHCP, SMB, Active Directory, and other components. ZDI attributed the rising volume partly to AI-assisted vulnerability discovery, noting no corresponding spike in active exploits yet.
88
60
SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks
60
April’s Patch Tuesday Brings Record Number of Fixes
60
CISA adds TP-Link, Apache, and Oracle bugs to its Known Exploited Vulnerabilities catalog
60
60
Microsoft Patch Tuesday for October 2022 doesn't fix Exchange Server flaws
60
60
Microsoft Patch Tuesday, January 2021 Edition
60
Microsoft Patch Tuesday for January 2021 fixes 83 flaws, including an actively exploited issue
60
60
60
60
Microsoft Issues Updates for 96 Vulnerabilities You Need to Patch this Month
60
The September 2026 Security Update Review
ZDI's September 2026 Microsoft update review lists two already-exploited Windows EoP zero-days and dozens of critical RCEs across Office, SQL Server, and Windows services.
The review catalogs Microsoft's September 2026 fixes, marking CVE-2026-85880 (Windows ALPC) and CVE-2026-81963 (Windows Update Stack) as already exploited elevation-of-privilege issues. It also lists critical RCE flaws in Office, Word, Excel, PowerPoint, Outlook, SQL Server, Windows DNS, DHCP and Failover Cluster, plus graphics component RCEs. Azure-side fixes include Entra ID, Copilot Studio, Azure AI Language and Azure AD B2C elevation-of-privilege flaws.
58
Hackers Target Langflow in CVE-2026
Threat actors are actively exploiting CVE-2026-0768, an unauthenticated Python RCE in Langflow, hunting OpenAI, AWS, and SSH credentials.
Attackers began exploiting CVE-2026-0768 (CVSS 9.8), an unauthenticated remote code execution flaw in the code validator of the Langflow AI low-code platform, affecting all versions up to 1.4.2. VulnCheck observed 50+ Canary detections on the first day of exploitation, with attackers checking Langflow, OpenAI, and AWS keys in environment variables, reading the secret key, and looking for SSH access and shell history; most traffic originates from Russia and targeted UK-based canaries. The flaw was reported via ZDI by Trend Research in July 2025 and disclosed in January 2026; six other Langflow CVEs were added to VulnCheck's KEV list this year.
72
60
Microsoft Releases Record
60
60
60
⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0
60
60
Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers
60
HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass
60
60
60
Microsoft Patch Tuesday security updates for September 2024 addressed four actively exploited zero
60