Loading story…
Microsoft released security updates for 172 vulnerabilities across Windows, Office, Exchange, SharePoint, .NET, Visual Studio, PowerShell, and Windows Server, with 8 rated critical and 162 rated important. The company said 6 vulnerabilities were actively exploited in the wild, including Windows privilege-escalation flaws affecting the Agere Modem native driver and Windows Remote Access Connection Manager, while critical issues in the release included remote code execution and privilege-escalation risks.
The update set also referenced related security issues involving IGEL OS Secure Boot, AMD EPYC SEV-SNP, and the TCG TPM 2.0 specification, with Microsoft still working on mitigations for Azure Confidential Computing exposure tied to the AMD issue. Microsoft’s Security Update Guide included advisory CVE-2025-24990, and defenders were urged to deploy patches through standard Microsoft update channels and review product-specific guidance immediately.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Microsoft released its October 2025 Patch Tuesday updates addressing 172 vulnerabilities across products including Windows, Office, Exchange, SharePoint, .NET, Visual Studio, PowerShell, and Windows Server. The bulletin said eight flaws were critical, 162 were important, and six vulnerabilities were actively exploited in the wild.
Microsoft's Security Update Guide includes an advisory entry for CVE-2025-24990. The reference indicates the advisory was published on 2025-01-01.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
csirt.sk
Open sourcemsrc.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft's February 2026 Patch Tuesday fixed 54 vulnerabilities across Windows, Windows Server, Office, Exchange, SharePoint, Visual Studio, .NET, Azure services, and Defender for Endpoint for Linux. Six of the patched flaws were reported as actively exploited in the wild, affecting **Windows Shell**, **MSHTML Framework**, **Microsoft Word**, **Desktop Window Manager**, **Windows Remote Access Connection Manager**, and **Windows Remote Desktop**, prompting calls for immediate deployment of security updates. The release also addressed two critical vulnerabilities in **Azure Compute Gallery**: `CVE-2026-21522` and `CVE-2026-23655`. According to the advisory, the bugs could enable privilege escalation and unauthorized access to sensitive data, including tokens and keys, expanding the risk beyond endpoint compromise to cloud-hosted assets and administrative credentials.
Jul 24, 2026
Microsoft released fixes for **117 vulnerabilities** across 15 product families, including **3 Critical**, **110 Important**, **3 Moderate**, and **1 Low** severity issues. Two flaws were already being exploited in the wild: `CVE-2024-43572` in **Microsoft Management Console** and `CVE-2024-43573` in the **Windows MSHTML Platform**. Microsoft also flagged eight additional vulnerabilities as more likely to be exploited within 30 days, while Windows accounted for the vast majority of the exposure with **93 CVEs** spanning remote code execution, elevation of privilege, and denial-of-service bugs. The most severe issues included `CVE-2024-43468`, a **Critical Microsoft Configuration Manager remote code execution** flaw with a **CVSS 9.8** score that requires an in-console update and additional hardening, and `CVE-2024-38124`, a **Windows Netlogon elevation of privilege** vulnerability with mitigation guidance. The release also addressed 15 Windows Mobile Broadband Driver flaws that generally require physical access or proximity, Windows 11 24H2-specific bugs such as `CVE-2024-43527` and `CVE-2024-43571`, and advisory items affecting Edge and curl-related components; Sophos said protections were available for `CVE-2024-43502`, `CVE-2024-43572`, and `CVE-2024-43573`.
Jun 29, 2026
Microsoft released fixes for **79 vulnerabilities** across 11 product families, including **7 Critical** issues and multiple flaws already exploited or associated with exploited conditions. The most significant actively exploited bugs were **`CVE-2024-38014`** in **Windows Installer** and **`CVE-2024-38217`** in **Windows Mark of the Web**, while **`CVE-2024-43491`** in the **Windows Update servicing stack** was highlighted as a high-severity risk for supported **Windows 10 version 1507 LTSB** and **IoT Enterprise 2015 LTSB** systems. Windows accounted for **47** of the patched CVEs, with **SQL Server** receiving fixes for **13** vulnerabilities and **SharePoint** affected by several high-risk remote code execution flaws that Microsoft said were more likely to be exploited within 30 days. Microsoft also noted that **Windows 11 24H2** is affected by **29** CVEs, including two already exploited in the wild, and the release referenced three **Adobe** vulnerabilities, including **`CVE-2024-41869`**, a critical **Adobe Reader** use-after-free flaw for which a workable exploit was already available.
Jun 29, 2026