Microsoft has released security patches to address multiple vulnerabilities in their software and products.
Microsoft has released security patches to address multiple vulnerabilities in their software and products. The vulnerabilities that have been classified as Critical in severity are listed in the table below. For the full list of security patches released by Microsoft, please refer to
Critical Vulnerabilities
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Azure OpenAI Elevation of Privilege Vulnerability
ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.
Windows Server Network driver Remote Code Execution Vulnerability
Windows DHCP Server Remote Code Execution Vulnerability
Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
DHCP Server Service Remote Code Execution Vulnerability
Windows GDI+ Remote Code Execution Vulnerability
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Copilot Remote Code Execution Vulnerability
Microsoft 365 Copilot Elevation of Privilege Vulnerability
SSH improper host validation
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Windows TCP/IP Remote Code Execution Vulnerability
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Windows Print Spooler Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft Exchange Online Elevation of Privilege Vulnerability
DirectX Graphics Kernel Remote Code Execution Vulnerability
DHCP Server Service Remote Code Execution Vulnerability
DHCP Server Service Remote Code Execution Vulnerability
Active Directory Certificate Services Elevation of Privilege Vulnerability
Windows DHCP Client Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Windows Media Remote Code Execution Vulnerability
Windows Media Remote Code Execution Vulnerability
Windows GDI+ Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft PowerPoint Remote Code Execution Vulnerability
Microsoft PowerPoint Remote Code Execution Vulnerability
Microsoft PowerPoint Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Defender Remote Code Execution Vulnerability
Microsoft Defender Remote Code Execution Vulnerability
node-tar: Decompression/parse DoS via unlimited input
Windows Hyper-V Elevation of Privilege Vulnerability
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Microsoft Azure Synapse Elevation of Privilege Vulnerability
xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
