Vulnerabilities
Microsoft
10 Vulnerabilities stories since Oct 2025.
- 10
- stories
- AUG 25
- latest
Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520
The chain leverages two distinct vulnerabilities—an authentication bypass and an unsafe .NET type instantiation flaw—to provide full server control without valid credentials.
DENNIS FISHER · AUG 25 · 2 min
All Vulnerabilities · Microsoft
Windows CVE-2026-32202 Exploited in the Wild
The current exploits are targeting CVE-2026-32202, a bug in the Windows Shell that allows an attacker to gain access to some sensitive data on the target network.
Dennis Fisher · 2 min
Stealthy Deep#Door Stealer Targets Windows Machines, Credentials
Deep#Door stealer is being used in intrusions targeting Windows machines, using an obfuscated deployment chain.
Dennis Fisher · 3 min
New Campaign Targets Mac Users With Novel Malware
The campaign targets high-value individuals and organizations in the cryptocurrency, digital assets, and finance sectors.
Dennis Fisher · 2 min
Microsoft Fixes Six Exploited Bugs in February Patch Tuesday Updates
The exploited vulnerabilities in question exist across various products, from Microsoft Word to Windows Shell.
Decipher · 3 minMicrosoft Releases Emergency Patch for CVE-2026-21509
The vulnerability (CVE-2026-21509) requires user interaction for an attack to succeed, with the most likely vector being an attacker sending a malicious Office file to a victim, who then opens it.
Dennis Fisher · 1 minMicrosoft Warns of Exploited Windows Kernel Zero-Day
The important-severity flaw (CVE-2025-62215) has been exploited, said Microsoft.
Lindsey O'Donnell-Welch · 2 min
Microsoft Fixes Actively Exploited Flaws in Patch Tuesday Release
Microsoft issued fixes for several actively exploited vulnerabilities in its latest patch Tuesday release.
Lindsey O'Donnell-Welch · 2 min