Loading story…
Microsoft's Security Update Guide published a batch of new vulnerability records spanning multiple CVE-2026-* identifiers, including CVE-2026-40369, CVE-2026-8548, CVE-2026-8535, CVE-2026-6472, CVE-2026-44431, CVE-2026-41090, CVE-2026-23663, CVE-2026-8522, CVE-2026-29518, CVE-2026-44608, CVE-2026-47784, CVE-2026-26110, CVE-2026-23672, CVE-2026-24300, and CVE-2026-21509. The entries appeared across both vulnerability and advisory pages on MSRC, indicating a coordinated publication of newly tracked Microsoft security issues.
The available references provide little technical detail beyond the identifiers and their presence in the MSRC portal, and several pages returned placeholder or "Not found" titles at the time of collection. Even so, the volume of newly listed CVEs signals ongoing expansion of Microsoft's disclosed vulnerability inventory, and defenders should monitor the corresponding MSRC records for severity ratings, affected products, exploitability assessments, and patch guidance as those details are populated.
See real exploitation activity before you spend the cycle.
1 event from the most recent confirmed update back to the earliest known activity.
The references show Microsoft Security Response Center pages for multiple 2026 CVEs and advisories becoming available in the Security Update Guide. No technical details, impact information, or remediation specifics are provided in the source content.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
39 references tracked. Mallory keeps watching after this page renders.
msrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft added and maintained several vulnerability records in its Security Update Guide, including **CVE-2026-26147**, **CVE-2026-34339**, **CVE-2026-8533**, **CVE-2026-23669**, and **CVE-2026-32222**, alongside earlier entries such as **CVE-2025-54112**, **CVE-2025-49680**, **CVE-2025-21401**, and **CVE-2024-43583**. The references point to official MSRC advisory pages and product advisory listings, indicating ongoing publication and tracking of Microsoft-assigned vulnerabilities across multiple product lines. The available records provide CVE identifiers, publication dates, and Microsoft advisory URLs, but no technical synopsis or impact details were included in the referenced entries. For defenders, the immediate significance is that Microsoft’s advisory catalog continues to expand with newly published and updated vulnerability records, requiring teams to monitor the Security Update Guide for affected products, severity information, and patch guidance as those details become available.
Jul 12, 2026
Microsoft published Security Update Guide entries for five vulnerabilities tracked as **`CVE-2024-49049`**, **`CVE-2025-21287`**, **`CVE-2025-27613`**, **`CVE-2026-21256`**, and **`CVE-2026-25181`**. The references point to official Microsoft advisory pages in the MSRC portal, including both `advisory` and `vulnerability` URL paths, indicating the issues were formally cataloged in Microsoft's vulnerability management system. The available records provide only minimal metadata and do not include public synopses, affected products, severity ratings, exploitation details, or remediation guidance in the referenced material. Even so, the publication of these CVE entries shows Microsoft added or maintained official tracking pages for multiple security flaws across 2024, 2025, and 2026, signaling that defenders should review the corresponding MSRC advisories directly for product impact and patch information.
Jul 12, 2026
Microsoft published Security Update Guide entries for **`CVE-2025-21263`**, **`CVE-2024-49016`**, **`CVE-2024-20671`**, and the older **`CVE-2021-28348`**, indicating active tracking and disclosure of multiple vulnerabilities across its product ecosystem. The referenced advisories come from Microsoft’s official MSRC channels, but the available records provide little public detail beyond the CVE identifiers and their presence in the update guide. The set of references points to ongoing Microsoft vulnerability management activity, with newer 2024 and 2025 advisories appearing alongside a prior 2021 entry in the same update infrastructure. Organizations that rely on Microsoft platforms should use the CVE records as authoritative placeholders for patch validation and asset review, and monitor the corresponding MSRC pages for severity, affected products, and remediation guidance as fuller advisory details become available.
Jul 12, 2026