Unit 42 Discovers 27 New Vulnerabilities Across Microsoft Products
Summary: Palo Alto Networks Unit 42 researchers discovered 27 new vulnerabilities addressed by Microsoft's Security Response Center across its last nine months of security updates, all rated "important" and spanning Remote Code Execution, Privilege Elevation, Information Disclosure and one Denial of Service flaw. The credited researchers include Zhibin Zhang, Tao Yan, Bo Qu, Gal De Leon, Haozhe Zhang, Bar Lahav, Yaron Samuel and Nadav Markus, with Zhang named MSRC's top vulnerability discoverer in Q1 and ranked 7th on the MSRC 2020 Q2 Security Leaderboard.
Bottom line: Twenty-seven flaws rated important in Microsoft products over nine months is a patch cadence problem for every Windows-heavy estate, and the source notes weaponized exploits for such vulnerabilities are what attackers reach for first.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026