Microsoft Patches Six Actively Exploited Flaws and Two Critical Azure Bugs

Microsoft released security updates for 172 vulnerabilities across Windows, Office, Exchange, SharePoint, .NET, Visual Studio, PowerShell, and Windows Server, with **8 rated critical** and **162 rated important**. The company said **6 vulnerabilities were actively exploited in the wild**, including Windows privilege-escalation flaws affecting the **Agere Modem native driver** and **Windows Remote Access Connection Manager**, while critical issues in the release included remote code execution and privilege-escalation risks. The update set also referenced related security issues involving **IGEL OS Secure Boot**, **AMD EPYC SEV-SNP**, and the **TCG TPM 2.0** specification, with Microsoft still working on mitigations for Azure Confidential Computing exposure tied to the AMD issue. Microsoft’s Security Update Guide included advisory **`CVE-2025-24990`**, and defenders were urged to deploy patches through standard Microsoft update channels and review product-specific guidance immediately.

Jan 5, 2026

Microsoft Patches 137 Flaws, Highlighting Word Preview Pane and Netlogon RCE Risks

Microsoft released its May Patch Tuesday updates fixing 137 vulnerabilities across Windows, Office, Azure, Dynamics 365, SharePoint, Copilot, and other products, with no actively exploited zero-days or publicly disclosed flaws reported at release. The update included multiple high-severity remote code execution bugs, notably Microsoft Word flaws `CVE-2026-40361` and `CVE-2026-40364`, which can be triggered through the Preview Pane by sending a malicious document, as well as `CVE-2026-42898` in Microsoft Dynamics 365 On-Premises, `CVE-2026-42823` in Azure Logic Apps, and `CVE-2026-33109` in Azure Managed Instance for Apache Cassandra. Researchers also flagged `CVE-2026-41089` in Windows Netlogon and `CVE-2026-41096` in Windows DNS Client as especially urgent because they expose broadly deployed enterprise infrastructure to remote compromise. Microsoft’s Windows 11 cumulative updates, including `KB5089549` and `KB5087420`, delivered many of the security fixes alongside reliability and usability improvements, and Microsoft said it was not aware of new issues with the release. Coverage and advisories also showed the breadth of the month’s attack surface, with additional fixes for SharePoint Server remote code execution, Office Click-to-Run privilege escalation, Hyper-V guest-to-host escalation, Teams spoofing, Outlook for iOS tampering, and several Copilot and Visual Studio Code vulnerabilities. Security researchers said the growing volume of Microsoft disclosures may reflect increased AI-assisted vulnerability discovery, while defenders were urged to prioritize patching domain controllers, DNS-exposed Windows systems, Office deployments, and internet-facing enterprise applications.

Jul 20, 2026

Microsoft Patches 163 Flaws Including Exploited SharePoint Bug and Defender Zero-Day

Microsoft released fixes for **163 vulnerabilities** in its April Patch Tuesday update, marking one of its largest security releases on record. The bundle includes **8 Critical** flaws, **154 Important** issues, and **1 Moderate** bug, with seven of the Critical vulnerabilities enabling remote code execution across products and components including **Windows TCP/IP**, **Windows IKE Service Extensions**, **Active Directory**, **Remote Desktop Client**, **Microsoft Office**, and **Microsoft Word**. Belgian authorities urged organizations to apply the updates immediately. The most urgent issues include **`CVE-2026-32201`**, an actively exploited **Microsoft SharePoint Server** vulnerability that was added to CISA’s Known Exploited Vulnerabilities catalog, and **`CVE-2026-33825`** in **Microsoft Defender**, a publicly disclosed zero-day tied to proof-of-concept code associated with the **BlueHammer** exploit. Microsoft also shipped Windows 11 cumulative updates with security hardening changes, including safer handling of **`.rdp`** files and improved visibility into **Secure Boot** certificates, while the broader patch set addressed numerous elevation-of-privilege and security feature bypass flaws that could support post-compromise escalation.

Apr 22, 2026

Microsoft Patches Six Actively Exploited Flaws and Two Critical Azure Bugs

How this story unfolded

Microsoft releases February 2026 Patch Tuesday updates

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Microsoft Patches Six Actively Exploited Flaws and Two Critical Azure Bugs

How this story unfolded

Microsoft releases February 2026 Patch Tuesday updates

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Microsoft Patches Six Actively Exploited Flaws and Two Critical Azure Bugs

How this story unfolded

Microsoft releases February 2026 Patch Tuesday updates

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

Microsoft Patch Tuesday Fixes 172 Flaws, Including 6 Actively Exploited Bugs

Microsoft Patches 137 Flaws, Highlighting Word Preview Pane and Netlogon RCE Risks

Microsoft Patches 163 Flaws Including Exploited SharePoint Bug and Defender Zero-Day

Microsoft Patches Six Actively Exploited Flaws and Two Critical Azure Bugs

How this story unfolded

Microsoft releases February 2026 Patch Tuesday updates

Related entities

Vulnerabilities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

Microsoft Patch Tuesday Fixes 172 Flaws, Including 6 Actively Exploited Bugs

Microsoft Patches 137 Flaws, Highlighting Word Preview Pane and Netlogon RCE Risks

Microsoft Patches 163 Flaws Including Exploited SharePoint Bug and Defender Zero-Day