Loading story…
Microsoft added and maintained several vulnerability records in its Security Update Guide, including CVE-2026-26147, CVE-2026-34339, CVE-2026-8533, CVE-2026-23669, and CVE-2026-32222, alongside earlier entries such as CVE-2025-54112, CVE-2025-49680, CVE-2025-21401, and CVE-2024-43583. The references point to official MSRC advisory pages and product advisory listings, indicating ongoing publication and tracking of Microsoft-assigned vulnerabilities across multiple product lines.
The available records provide CVE identifiers, publication dates, and Microsoft advisory URLs, but no technical synopsis or impact details were included in the referenced entries. For defenders, the immediate significance is that Microsoft’s advisory catalog continues to expand with newly published and updated vulnerability records, requiring teams to monitor the Security Update Guide for affected products, severity information, and patch guidance as those details become available.
See real exploitation activity before you spend the cycle.
10 events from the most recent confirmed update back to the earliest known activity.
Microsoft added CVE-2025-21274 to its Security Update Guide. The provided reference does not include a synopsis or additional technical details.
Microsoft published a Security Update Guide entry for CVE-2026-26147. The reference includes no synopsis or technical summary.
Microsoft published a Security Update Guide entry for CVE-2026-8533. The reference provides no additional narrative details.
Microsoft published a Security Update Guide entry for CVE-2026-34339. No synopsis is included in the reference.
Microsoft published a Security Update Guide entry for CVE-2026-32222. No further information is present in the provided content.
Microsoft added CVE-2026-23669 to its Security Update Guide. The supplied content does not include technical details or impact information.
Microsoft published a Security Update Guide entry for CVE-2025-54112. The provided reference contains no synopsis or exploit information.
Microsoft published a Security Update Guide entry for CVE-2025-49680. No additional context is available in the provided content.
Microsoft published a Security Update Guide entry for CVE-2025-21401. The reference does not include a synopsis or remediation details.
Microsoft added CVE-2024-43583 to its Security Update Guide. No further technical details are provided in the reference content.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
10 references tracked. Mallory keeps watching after this page renders.
msrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft's Security Update Guide published a batch of new vulnerability records spanning multiple `CVE-2026-*` identifiers, including `CVE-2026-40369`, `CVE-2026-8548`, `CVE-2026-8535`, `CVE-2026-6472`, `CVE-2026-44431`, `CVE-2026-41090`, `CVE-2026-23663`, `CVE-2026-8522`, `CVE-2026-29518`, `CVE-2026-44608`, `CVE-2026-47784`, `CVE-2026-26110`, `CVE-2026-23672`, `CVE-2026-24300`, and `CVE-2026-21509`. The entries appeared across both vulnerability and advisory pages on MSRC, indicating a coordinated publication of newly tracked Microsoft security issues. The available references provide little technical detail beyond the identifiers and their presence in the MSRC portal, and several pages returned placeholder or "Not found" titles at the time of collection. Even so, the volume of newly listed CVEs signals ongoing expansion of Microsoft's disclosed vulnerability inventory, and defenders should monitor the corresponding MSRC records for severity ratings, affected products, exploitability assessments, and patch guidance as those details are populated.
Jul 12, 2026
Microsoft published Security Update Guide entries for five vulnerabilities tracked as **`CVE-2024-49049`**, **`CVE-2025-21287`**, **`CVE-2025-27613`**, **`CVE-2026-21256`**, and **`CVE-2026-25181`**. The references point to official Microsoft advisory pages in the MSRC portal, including both `advisory` and `vulnerability` URL paths, indicating the issues were formally cataloged in Microsoft's vulnerability management system. The available records provide only minimal metadata and do not include public synopses, affected products, severity ratings, exploitation details, or remediation guidance in the referenced material. Even so, the publication of these CVE entries shows Microsoft added or maintained official tracking pages for multiple security flaws across 2024, 2025, and 2026, signaling that defenders should review the corresponding MSRC advisories directly for product impact and patch information.
Jul 12, 2026Microsoft's Security Update Guide published or maintained advisory entries for several vulnerabilities spanning multiple years, including `CVE-2026-24282`, `CVE-2025-21335`, `CVE-2024-43622`, `CVE-2022-41052`, and `CVE-2022-29119`. The referenced pages are hosted across Microsoft's advisory and vulnerability portals and indicate ongoing cataloging of security issues affecting Microsoft products. The available references provide only minimal metadata and no technical synopsis, affected product details, severity ratings, exploitation status, or remediation guidance. Even so, the presence of these entries signals that defenders should review the corresponding Microsoft advisories directly, validate product exposure, and track update availability for any systems that may be impacted by the listed CVEs.
Jul 12, 2026