Loading story…
Microsoft added Security Update Guide entries for CVE-2025-48815 and CVE-2025-48818, with the latter explicitly associated with PowerShell and both listed under Microsoft’s vulnerability disclosure and update ecosystem. The entries identify Microsoft as the assigning CNA and link to standard resources including CVSS guidance, CSAF/API feeds, acknowledgements, and support lifecycle information, confirming the CVEs have been reserved and published in Microsoft’s advisory infrastructure.
The available records provide almost no technical detail: they do not specify affected products or versions, severity, exploitation status, impact, or remediation steps. A related Microsoft advisory reference for CVE-2022-34718 is also present but similarly lacks usable synopsis data in the provided material, leaving defenders with confirmation of the identifiers but little actionable information from the exposed entries alone.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
Microsoft's Security Update Guide lists CVE-2025-48818 as a tracked vulnerability entry associated with PowerShell. The excerpt confirms the CVE identifier and Microsoft's role as CNA, but does not include impact, severity, or fix details.
Microsoft's Security Update Guide lists CVE-2025-48815 as a tracked vulnerability entry. The excerpt confirms the CVE identifier and its association with Microsoft's update ecosystem, but provides no technical or remediation details.
Microsoft's Security Update Guide includes an advisory entry for CVE-2022-34718. The provided reference confirms the CVE's presence in Microsoft's product advisory ecosystem but does not include technical details in the excerpt.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
msrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft published Security Update Guide entries for **`CVE-2022-41102`** and **`CVE-2025-21288`**, indicating vendor-tracked vulnerabilities with official advisory pages in the MSRC portal. The available references point to Microsoft’s update and advisory infrastructure but do not include public synopsis text, affected product details, severity ratings, exploitation status, or remediation guidance in the provided material. The entries show that both CVEs were formally cataloged by Microsoft through its security advisory system, giving defenders authoritative identifiers to monitor for future updates, patch information, and product impact details. Based on the supplied references alone, the confirmed event is the publication of Microsoft advisory records rather than disclosed technical specifics about the underlying flaws.
Jul 12, 2026
Microsoft published Security Update Guide entries for **`CVE-2025-21178`**, **`CVE-2025-36357`**, and **`CVE-2021-33741`** through its MSRC advisory and vulnerability portals. The references indicate the issues were cataloged in Microsoft's official update infrastructure, but the provided records do not include vulnerability names, affected products, severity ratings, exploitation details, or remediation guidance. The available information shows only that the CVEs were listed in Microsoft’s security advisory system, with two entries tied to 2025 identifiers and one to a 2021 identifier. Because no synopsis or technical detail is included in the source material, defenders would need to consult the corresponding MSRC pages directly to determine impact, patch availability, and any required mitigation or detection actions.
Jul 12, 2026
Microsoft published Security Update Guide entries for **CVE-2026-32212** and **CVE-2025-48799** on its MSRC and product advisory portals. The references indicate both vulnerabilities were assigned official Microsoft tracking pages, but no public synopsis or technical details were included in the available records. The entries point defenders to Microsoft’s update infrastructure for vulnerability tracking and remediation guidance as details become available. Organizations that rely on Microsoft products should monitor the associated advisory pages for severity ratings, affected products, patch availability, and any mitigation or detection recommendations tied to these CVEs.
Jul 12, 2026