Zoom patches critical unauthenticated privilege escalation in Workplace for Windows
CVE-2026-108186 (CVSS 9.6) affects 7.1.0 before 7.1.8; CVE-2026-108187 (CVSS 8.1) affects builds before 7.1.5.
Stories per day · 30 days
22 RSS
Relatedmicrosoft43patch-tuesday26zero-day11cve-2026-969519remote-code-execution9outlook8exchange7privilege-escalation7rce7supply-chain7cisa-kev6infostealer6kev6macos6active-directory5command-injection5motw5emudhra4
295 stories, newest first · one card per story
Stories tagged #windows
Researcher posts unconfirmed Windows SignDrop CLFS privilege PoC
The GitHub proof of concept claims local user-to-SYSTEM escalation, with no CVE or Microsoft confirmation.
Microsoft discloses Active Directory remote code execution and denial-of-service flaws
Both Important-rated flaws need low privileges; the record does not show an active exploitation campaign.
November Windows updates fix USB audio failures from September patches
USB Audio Class 1.0 devices on Windows 10, Windows 11, and Windows Server 2012 and later are fixed by KB5132061.
Microsoft patches 1,259 flaws, including exploited Outlook bug
Opening a crafted message can leak an NTLMv2 hash without Outlook’s usual warning.
Microsoft November 2026 patches fix 1235 flaws, one exploited in Outlook
CISA added Outlook spoofing flaw CVE-2026-124194 to KEV and set a November 24, 2026 patch deadline.
1
Microsoft November 2026 patches critical RCEs and an exploited Outlook flaw
Only CVE-2026-124194, a moderate Outlook spoofing bug, is marked exploited; builds and fixes are not listed.
1
Microsoft November 2026 patches fix 1095 flaws, one exploited
Only CVE-2026-124194, an Outlook spoofing bug scored 6.5, is exploited; 48 of 64 critical issues are remote code execution.
2
November 2026 Patch Tuesday lists dozens of Microsoft flaws
The excerpt lists 57 CVEs, including CVSS 9.8 remote code execution bugs rated exploitation less likely.
Microsoft November 2026 Patch Tuesday covers dozens of Windows flaws
The visible Rapid7 list includes several 9.8 remote code execution bugs; each entry is marked not publicly disclosed.
Microsoft November patches list 1,094 CVEs; one Outlook flaw exploited
CISA added the exploited Outlook spoofing bug to KEV; a Windows Search flaw is called zero-click code execution.
ZDI lists November 2026 Microsoft fixes, one Outlook bug exploited
CVE-2026-124194 is the only listed flaw marked exploited; it is a Moderate CVSS 6.5 spoofing bug.
Microsoft November 2026 update fixes 1,093 flaws, one Outlook zero-day
Opening a crafted file can leak an NTLMv2 hash; the Preview Pane is not an attack vector.
Notepad++ 8.9.9 fixes six local flaws, including privilege escalation
Issues affect 8.9.8 and earlier; CVEs are unassigned, and MIME Tools 3.2 fixes decoding flaws through 3.1.
1
Microsoft Paint vulnerability enables remote code execution (CVE-2026-83844)
An out-of-bounds read in Windows Paint build 11.2609.401.0 lets unauthenticated attackers execute code remotely without interaction.
1
Critical Terminal2Shell flaw grants instant shell on all OS
Design flaw in every terminal emulator on macOS Linux Windows and more allows attackers to gain instant shell with full user privileges with no patches available.
38
Paper tests Agent Detector for unsanctioned LLM agents on Windows
On a small controlled bench it caught every synthetic agent in most runs while two behaviour-only rules flagged every twin.
Fake game downloads secretly monetize Windows PCs
Deceptive installers for games and utilities deliver software that shares bandwidth, runs distributed computing workloads, or installs utilities without informed user consent.
Open WebUI Windows installer generates low-entropy master key
The Open WebUI Windows installer uses only the installation second as entropy for its master secret key that signs session tokens.
Talos details VOLTA, a Windows infostealer that ranks loot with LLMs
The same newsletter repeats claims about Railway agents, freezer attacks in 10 countries, and a Binance theft.
1
Hackers use fake software downloads to hijack Windows PCs
Fake installers bundle proxies, BOINC computing clients and utilities to monetize infected devices.
1
UEFI bootkit infected fully patched Windows machines
BlackX UEFI bootkit bypassed Secure Boot on fully updated Windows 11 systems three years after the original BlackLotus discovery.
Microsoft Windows Aero Theme DoS vulnerability
ZDI-26-868 rated 4.7; local attackers can trigger denial-of-service after obtaining low-privileged code execution.
BITTER uses PapRAT in Windows espionage against South Asia
FortiGuard Labs, with high confidence, describes three infection chains and a Rust rebuild that adds PowerShell, sleep and exit commands.