Lucene search
+L

987 matches found

Talos Blog
Talos Blog
added 2026/03/10 10:23 p.m.11 views

Microsoft Patch Tuesday for March 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for March 2026 which includes 79 vulnerabilities, including three that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the three "critical" vulnerabilitie...

8.8CVSS6.4AI score0.04671EPSS
SaveExploits8
Rapid7 Blog
Rapid7 Blog
added 2026/03/10 8:30 p.m.13 views

Patch Tuesday - March 2026

Microsoft is publishing 77 vulnerabilities this March 2026 Patch Tuesday. Microsoft is aware of public disclosure of two of today’s vulnerabilities, but without evidence of exploitation in the wild for any yet, so there are no Microsoft additions to CISA KEV today. Earlier in the month, Microsoft...

8.8CVSS7.3AI score0.02044EPSS
SaveExploits0
Qualys Blog
Qualys Blog
added 2026/03/10 7:11 p.m.12 views

Microsoft and Adobe Patch Tuesday, March 2026 Security Update Review

Microsoft has rolled out its March 2026 Patch Tuesday updates, delivering a fresh batch of security fixes designed to keep Windows environments protected from emerging threats. The release addresses multiple vulnerabilities spanning Windows components and other Microsoft products. Here's a quick...

9.8CVSS6.5AI score0.04671EPSS
SaveExploits5
Information Security Automation
Information Security Automation
added 2026/03/09 10:59 p.m.50 views

About Remote Code Execution – Windows Shell (CVE-2026-21510) vulnerability

About Remote Code Execution - Windows Shell CVE-2026-21510 vulnerability. A vulnerability from the February Microsoft Patch Tuesday. The Windows Shell is the primary interface through which users interact with the Windows operating system. It includes visible elements such as the Desktop, Taskbar...

8.8CVSS6.6AI score0.25835EPSS
SaveExploits3
The Hacker News
The Hacker News
added 2026/03/02 10:36 a.m.9 views

APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday

A recently disclosed security flaw patched by Microsoft may have been exploited by the Russia-linked state-sponsored threat actor known as APT28, according to new findings from Akamai. The vulnerability in question is CVE-2026-21513 CVSS score: 8.8, a high-severity security feature bypass affecti...

8.8CVSS7.5AI score0.72152EPSS
SaveExploits15
Malwarebytes
Malwarebytes
added 2026/02/16 8:2 a.m.11 views

A week in security (February 9 – February 15)

Last week on Malwarebytes Labs: How to find and remove credential-stealing Chrome extensions Fake shops target Winter Olympics 2026 fans Outlook add-in goes rogue and steals 4,000 credentials and payment data Child exploitation, grooming, and social media addiction claims put Meta on trial Apple...

5.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/02/11 1:28 p.m.16 views

Over 60 Software Vendors Issue Security Fixes Across OS, Cloud, and Network Platforms

It's Patch Tuesday, which means a number of software vendors have released patches for various security vulnerabilities impacting their products and services. Microsoft issued fixes for 59 flaws, including six actively exploited zero-days in various Windows components that could be abused to bypa...

9.9CVSS6.4AI score0.0049EPSS
SaveExploits0
Information Security Automation
Information Security Automation
added 2026/02/11 11:8 a.m.23 views

February Microsoft Patch Tuesday

February Microsoft Patch Tuesday. A total of 55 vulnerabilities, half as many as in January. There are as many as six ❗️ vulnerabilities being exploited in the wild: 🔻 SFB/RCE - Windows Shell CVE-2026-21510 🔻 SFB/RCE - Microsoft Word CVE-2026-21514 🔻 SFB - MSHTML Framework CVE-2026-21513 🔻 EoP -...

8.8CVSS6.9AI score0.25835EPSS
SaveExploits18
Rapid7 Blog
Rapid7 Blog
added 2026/02/11 1:58 a.m.24 views

Patch Tuesday - February 2026

Microsoft is publishing 55 vulnerabilities this February 2026 Patch Tuesday. Microsoft is aware of exploitation in the wild for six of today’s vulnerabilities, and notes public disclosure for three of those. Earlier in the month, Microsoft provided patches to address three browser vulnerabilities...

8.8CVSS6.9AI score0.25835EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.21 views

PT-2026-7483

Heads up, folks: Microsoft's February 2026 Patch Tuesday is out, dropping 55 vulnerability fixes across various products. Among these is CVE-2025-59498, which Microsoft has explicitly marked as Critical. This update is significant, addressing a broad spectrum of security issues. While the specifi...

5.5AI score
SaveExploits0References1
Talos Blog
Talos Blog
added 2026/02/10 11:54 p.m.12 views

Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for February 2026, which includes 59 vulnerabilities affecting a range of products, including two that Microsoft marked as "Critical". CVE-2026-21522 is a critical elevation of privilege vulnerability affecting Microsoft ACI Confidential...

8.8CVSS6.8AI score0.25835EPSS
SaveExploits18
Krebs on Security
Krebs on Security
added 2026/02/10 9:49 p.m.16 views

Patch Tuesday, February 2026 Edition

Microsoft today released updates to fix more than 50 security holes in its Windows operating systems and other software, including patches for a whopping six "zero-day" vulnerabilities that attackers are already exploiting in the wild. Zero-day 1 this month is CVE-2026-21510, a security feature...

8.8CVSS6.6AI score0.72152EPSS
SaveExploits23
Qualys Blog
Qualys Blog
added 2026/02/10 8:51 p.m.21 views

Microsoft and Adobe Patch Tuesday, February 2026 Security Update Review

Microsoft's February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for February 2026 This month's release...

9.8CVSS7.5AI score0.25835EPSS
SaveExploits12
Information Security Automation
Information Security Automation
added 2026/01/24 9:40 a.m.11 views

About Information Disclosure – Desktop Window Manager (CVE-2026-20805) vulnerability

About Information Disclosure - Desktop Window Manager CVE-2026-20805 vulnerability. Desktop Window Manager is a compositing window manager that has been part of Windows since Windows Vista. Exploitation of the vulnerability, which was addressed in the January Microsoft Patch Tuesday, allows a loc...

5.5CVSS6.1AI score0.05028EPSS
SaveExploits5
HackRead
HackRead
added 2026/01/14 1:31 p.m.12 views

Microsoft January 2026 Patch Tuesday: 115 Vulnerabilities Fixed

Microsoft kicks off 2026 with 115 security updates, including a fix for an actively exploited zero-day. Protect your Windows and Office systems today...

6.9AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2026/01/14 5:13 a.m.24 views

Patch Tuesday - January 2026

Microsoft is publishing 114 vulnerabilities this January 2026 Patch Tuesday. Today’s menu includes just one vulnerability marked as exploited in the wild, as well as two vulnerabilities where Microsoft is aware of public disclosure. There are no critical remote code execution or elevation of...

7.8CVSS8.7AI score0.17312EPSS
SaveExploits6
Krebs on Security
Krebs on Security
added 2026/01/14 12:47 a.m.9 views

Patch Tuesday, January 2026 Edition

Microsoft today issued patches to plug at least 113 security holes in its various Windows operating systems and supported software. Eight of the vulnerabilities earned Microsoft's most-dire "critical" rating, and the company warns that attackers are already exploiting one of the bugs fixed today...

9.8CVSS9.4AI score0.10561EPSS
SaveExploits8
Positive Technologies
Positive Technologies
added 2026/01/14 12:0 a.m.22 views

PT-2026-2856

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.6 and earlier Description A flaw exists in Substance3D - Stager that involves an out-of-bounds read when processing a specially crafted file. This could allow an attacker to read beyond the boundaries of...

7.8CVSS5.9AI score0.00157EPSS
SaveExploits0References4
Qualys Blog
Qualys Blog
added 2026/01/13 9:34 p.m.14 views

Microsoft and Adobe Patch Tuesday, January 2026 Security Update Review

Starting the year on a security-first note, Microsoft's January 2026 Patch Tuesday resolves several vulnerabilities that could impact enterprise environments. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for January 2026 This month's release addresses 115...

8.8CVSS8.9AI score0.31139EPSS
SaveExploits7
Talos Blog
Talos Blog
added 2026/01/13 6:29 p.m.10 views

Microsoft Patch Tuesday for January 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for January 2026, which includes 112 vulnerabilities affecting a range of products, including 8 that Microsoft marked as "critical". In this month's release, Microsoft observed one of the included "important" vulnerabilities, CVE-2026-20805, as...

8.4CVSS8.3AI score0.07983EPSS
SaveExploits5
Rows per page
Query Builder