criticalvulnerability
Microsoft Issues Record-Breaking Security Update Patching 1,413 Vulnerabilities
Includes Actively Exploited Windows Shell Bug; Over 670 Privilege Escalation Flaws
Cyber.TechVoid1 min read
Key Takeaways
- Microsoft released a record 1,413 security patches in a single Patch Tuesday cycle, exceeding previous benchmarks.
- One Windows Shell vulnerability is confirmed to be under active exploitation; specific CVE details are pending.
- Over 670 flaws relate to privilege escalation, and more than 300 are remote code execution vulnerabilities.
Related Security News
criticalVulnerability
CISA Issues Advisory for Seven Vulnerabilities in Malcolm ICS Software
The Cybersecurity and Infrastructure Security Agency (CISA) has released advisory ICSA-26-280-01 disclosing seven CVEs affecting CISA Malcolm industrial control system software versions up to 26.07.1. The vulnerabilities span authentication bypass by spoofing, incorrect authorization, server-side request forgery (SSRF), cross-site request forgery (CSRF), and incorrect authorization. Exploitation could allow unauthenticated network callers to reach the Arkime backend with forged identities, bypass role-based access controls, and fetch arbitrary URLs via the FilePond PHP component. Patching is available in Malcolm Version v26.08.0.
CISA Advisories2 min read
