Vulnerability (CVE)
Microsoft released patches for 138 vulnerabilities on Tuesday, none listed as publicly known or under active attack, including 30 rated Critical and 104 rated Important, with 61 privilege escalation and 32 remote code execution flaws among them. The most...
Microsoft disclosed CVE-2026-42897, a spoofing bug stemming from a cross-site scripting flaw with a CVSS score of 8.1 affecting on-premise Exchange Server, which is under active exploitation in the wild. Microsoft is offering a temporary mitigation through...
Microsoft's May 2026 security update covers 137 vulnerabilities, 31 of them rated critical, and Microsoft reports none of them were observed being actively exploited in the wild. Sixteen of the critical entries are remote code execution flaws across...