Topic

Microsoft: news, advisories and analysis

18 articlesUpdated 18 Oct 2026

CyberSecureToday covers Microsoft across 18 articles published between 10 Sep 2026 and 18 Oct 2026. The coverage includes 17 vulnerability advisories. 17 advisories are rated critical or high severity, and 6 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Microsoft most often intersect with Active Exploitation, Remote Code Execution and Cloud Security, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Windows OLE Untrusted Pointer Dereference Flaw Enables Network-Based Remote Code Execution”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Windows OLE Untrusted Pointer Dereference Flaw Enables Network-Based Remote Code Execution
A critical untrusted pointer dereference vulnerability in Windows OLE (CVE-2026-96924) enables remote, unauthenticated code execution without user interaction.
CST Editorial Desk18 Oct 20269 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Cryptographic Signature Verification Flaw CVE-2026-102866 Enables Token Forgery and Account Takeover
Microsoft patches a critical cryptographic signature verification flaw in SharePoint Server (CVE-2026-102866) that permits token tampering and full administrative impersonation.
CST Editorial Desk17 Oct 20269 min read
ThreatsCloud & SaaSCritical
Microsoft Patches Maximum-Severity CVSS 10.0 Privilege Escalation Flaw CVE-2026-96207 in Partner Center Cloud Service
Microsoft resolves a maximum-severity privilege escalation flaw (CVE-2026-96207, CVSS 10.0) in Partner Center that exposed delegated customer tenants to unauthorized administrative control.
CST Editorial Desk17 Oct 20268 min read
ThreatsCloud & SaaSCritical
Azure Kubernetes Service Cilium eBPF Verifier Flaw Allows Pod-to-Host Kernel Container Escape
Microsoft MSRC releases critical patch for CVE-2026-47182 in Azure Kubernetes Service, resolving an eBPF verifier flaw in Cilium enabling pod escape to host kernel.
Aisha Noor7 Oct 20268 min read
ThreatsCloud & SaaSCritical
Azure AI Foundry MCP Agentic Execution Flaw Enables Cross-Tenant Tool Hijacking CVE-2026-89104
Microsoft MSRC advisory documents a critical model-context-protocol tool injection flaw in Azure AI Foundry enabling indirect agentic tool hijacking.
Aisha Noor6 Oct 20268 min read
ThreatsCloud & SaaSHigh
Microsoft Exchange Flaw Lets Authenticated Users Read Other Mailboxes, Update Reissued
Exchange Server CVE-2026-96940 lets authenticated users read other mailboxes. Microsoft rates it Exploitation More Likely. Install the September 2026 v2 SU.
Daniel Okafor3 Oct 20265 min read
ThreatsCloud & SaaSHigh
Microsoft Outlook Memory Parsing Flaw Enables Remote Code Execution via Crafted Documents
Microsoft MSRC discloses high-severity 8.8 CVSS RCE flaw CVE-2026-70125 in Microsoft Outlook enabling arbitrary code execution via crafted compound documents.
CST Editorial Desk26 Sep 202614 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint SafeControls Bypass Weaponized for Remote Code Execution
Microsoft reclassifies CVE-2026-65660 as an 8.8 CVSS RCE flaw after threat actors bypass SharePoint SafeControls filtering to execute arbitrary .NET code.
CST Editorial Desk26 Sep 202614 min read
ThreatsCloud & SaaSCritical
Microsoft Azure Arc Confused Deputy Flaw Enables Privilege Escalation Across Hybrid Clusters
Microsoft discloses critical CVSS 10.0 flaw CVE-2026-69399 in Azure Arc, enabling unauthenticated attackers to exploit confused deputy proxies across hybrid cloud nodes.
Daniel Okafor25 Sep 202618 min read
ThreatsCloud & SaaSHigh
Azure Kubernetes Service Container Path Traversal Flaw Enables Node Escape and Code Execution
Microsoft patches high-severity vulnerability CVE-2026-32193 in Azure Kubernetes Service allowing container workloads to escape sandboxes via path traversal.
Priya Raman19 Sep 202611 min read
ThreatsCloud & SaaSCritical
Microsoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution
Microsoft resolves maximum-severity CVSS 10.0 vulnerability CVE-2026-69836 in Entra ID allowing unauthenticated remote code execution via unsafe object deserialization.
Daniel Okafor19 Sep 202612 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Server Critical Deserialization & Auth Bypass Flaws Under Active Cyberattack
CISA orders federal agencies to patch critical Microsoft SharePoint vulnerabilities CVE-2026-58644 and CVE-2026-56164 enabling unauthenticated remote code execution.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Server Critical Deserialization Flaw CVE-2026-50522 Exploited in Active Attacks
CISA adds Microsoft SharePoint Server deserialization flaw CVE-2026-50522 (CVSS 9.8) to its KEV catalog following active exploitation against enterprise document farms.
Priya Raman16 Sep 202611 min read
ThreatsCloud & SaaSCritical
Microsoft ADFS Cloud Identity Privilege Escalation Flaw CVE-2026-56155 Under Active Exploitation
CISA flags Microsoft Active Directory Federation Services vulnerability CVE-2026-56155 (CVSS 9.8) exploited in attacks forging SAML claims across hybrid Azure clouds.
Daniel Okafor16 Sep 202610 min read
ThreatsCloud & SaaSHigh
Microsoft Windows WinSock Driver Zero-Day Flaw CVE-2026-68820 Exploited by Ransomware Groups for SYSTEM Takeover
CISA warns of in-the-wild exploitation of CVE-2026-68820, a use-after-free vulnerability in the Windows Ancillary Function Driver (afd.sys) granting SYSTEM privilege.
Daniel Okafor16 Sep 20269 min read
ThreatsCloud & SaaSCritical
Microsoft Windows IKE Protocol Double-Free RCE Flaw Exploited in Active Network Attacks
CISA confirms active in-the-wild exploitation of CVE-2026-33824, an unauthenticated double-free memory corruption flaw in Windows IKE enabling remote root code execution over UDP 500.
Mei-Lin Chen15 Sep 20268 min read
NewsCloud & SaaS
Microsoft September 2026 cumulative updates trigger Remote Desktop Services deadlock across Windows Server
Enterprise sysadmins face operational paralysis as September 2026 security updates trigger Remote Desktop Services freezes across Windows Server 2019, 2022, and 2025.
Aisha Noor14 Sep 20265 min read
ThreatsCloud & SaaSCritical
Microsoft ships 973 fixes in September Patch Tuesday, two flaws already exploited
Microsoft’s September 2026 rollup addresses 973 CVEs, including two elevation-of-privilege bugs — in the Windows Update Stack and ALPC — confirmed under active attack.
Priya Raman10 Sep 20267 min read