Practical IT guides, comparisons, explainers and news — curated by practitioners.
Browse articles tagged Vulnerability.
CISA added Microsoft SharePoint Server flaw CVE-2026-45659 (CVSS 8.8) to its Known Exploited Vulnerabilities catalog, citing active exploitation and setting a July 4, 2026 remediation deadline for U.S. federal agencies.
Microsoft's June 2026 security update KB5094125 patches five vulnerabilities in Windows Server 2025, including a critical unauthenticated Remote Desktop Services RCE (CVE-2026-0235) and a Hyper-V guest-to-host escape (CVE-2026-0237). The update raises the OS build to 26100.32995 and applies to all editions across full GUI and Server Core installations.
Microsoft released KB5094122, the June 2026 cumulative security update for Windows 10 Version 1607 and Windows Server 2016, addressing critical remote code execution and privilege escalation vulnerabilities. The update moves the build to 14393.9234 and fixes flaws in the Windows Kernel, CLFS Driver, Graphics Component and Print Spooler.
Microsoft's June 2026 security update KB5094128 patches multiple critical vulnerabilities in Windows Server 2022, including an unauthenticated NFS remote code execution flaw (CVE-2026-26001, CVSS 9.8), a Task Scheduler privilege escalation bug, an AD CS authentication bypass, and a Windows kernel memory corruption issue. The update raises the OS build to 20348.5256 and requires a restart.
Microsoft released KB5082142 on April 14, 2026, a critical security update for Windows Server 2022 that patches remote code execution, privilege escalation, information disclosure, and denial-of-service vulnerabilities. The cumulative update raises the OS build to 20348.5020 and requires a restart.
Microsoft's April 2026 Patch Tuesday update KB5082198 raises Windows 10 Version 1607 and Windows Server 2016 to build 14393.9060, addressing kernel remote code execution, LSA privilege escalation, networking information disclosure, file system denial of service, and a Windows Defender Application Control bypass.
Microsoft's March 2026 cumulative update KB5078766 raises Windows Server 2022 to build 20348.4893 and patches several critical vulnerabilities, including an unauthenticated remote code execution flaw in the RPC runtime (CVE-2026-0847) and a Kerberos authentication bypass (CVE-2026-0863). Administrators are advised to prioritize deployment across domain controllers and critical infrastructure.
