Microsoft fixes actively exploited Windows Hyper-V zero-day flaws
60
Microsoft January 2019 Patch Tuesday updates fix 7 critical vulnerabilities
60
Microsoft Patch Tuesday, September 2026 Security Update Review
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.
74
Latest Microsoft Windows Updates Patch Dozens of Security Flaws
60
March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V
60
Microsoft fixes critical flaws in Windows Kerberos, Hyper-V (CVE-2024-20674, CVE-2024-20700)
60
60
Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities
60
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
60
Microsoft Releases June 2019 Security Updates to Patch 88 Vulnerabilities
60
The September 2026 Security Update Review
ZDI's September 2026 Microsoft update review lists two already-exploited Windows EoP zero-days and dozens of critical RCEs across Office, SQL Server, and Windows services.
The review catalogs Microsoft's September 2026 fixes, marking CVE-2026-85880 (Windows ALPC) and CVE-2026-81963 (Windows Update Stack) as already exploited elevation-of-privilege issues. It also lists critical RCE flaws in Office, Word, Excel, PowerPoint, Outlook, SQL Server, Windows DNS, DHCP and Failover Cluster, plus graphics component RCEs. Azure-side fixes include Entra ID, Copilot Studio, Azure AI Language and Azure AD B2C elevation-of-privilege flaws.
58
Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month
60
U.S. CISA adds Fortinet FortiOS flaw to its Known Exploited Vulnerabilities catalog
60
60
Microsoft Patch Tuesday updates for January 2025 fixed three actively exploited flaws
60
Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited
60
Microsoft Patch Tuesday for July 2024 fixed 2 actively exploited zero
60
Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)
60
Microsoft Patch Tuesday for March 2024 fixed 59 flaws
60
60
Patch Tuesday for August 2022 fixed actively exploited zero
60
Microsoft’s Final Patch Tuesday Fixes Follina Bug
60
Microsoft March 2022 Patch Tuesday updates fix 89 vulnerabilities
60
Microsoft Patch Tuesday for May 2021 fix 4 critical flaws
60
Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws
60
Microsoft Issues Software Updates for 17 Critical Vulnerabilities
60
Microsoft Patches Two Zero
60
60
Microsoft Releases Emergency Windows 11 Update Following Patch Tuesday Bugs
Microsoft issued emergency Windows 11 update KB5129195 to fix Patch Tuesday regressions and fully close the CVE-2026-62721 privilege escalation flaw.
Microsoft shipped out-of-band cumulative update KB5129195 for Windows 11 24H2 and 25H2 (builds 26100.9457 and 26200.9457) after the September 8 Patch Tuesday rollup, which addressed over 960 CVEs including two actively exploited flaws, broke Remote Desktop Services, Hyper-V Plan9 folder sharing, and USB audio. The emergency release also strengthens the incomplete fix for CVE-2026-62721, an elevation-of-privilege flaw in the Windows User-Mode Power Service that could let a local attacker gain SYSTEM privileges. Companion patches cover Windows 11 26H1, Windows 10, and Windows Server. Some USB Audio Class 1.0 and AMD Radeon graphics issues remain unresolved.
70
Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws
60
Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days
60
Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities
60
Microsoft Patch Tuesday for July 2025 — Snort rules and prominent vulnerabilities
60
60
Microsoft Patches Eight Zero
60
60
November Patch Tuesday release contains three critical remote code execution vulnerabilities
60
U.S. CISA adds Microsoft Windows and Rejetto HTTP File Server bugs to its Known Exploited Vulnerabilities catalog
60
Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper
60
60