/
criticity:high × cves:CVE-2026-108398 × limpar

Resultados

4 casos · pág. 1/1

krebsonsecurity.com · · 2 fontes · 2 atualizações high

Microsoft October 2026 Patch Tuesday fixes 1,400+ flaws, a record batch with one exploited Windows Shell zero-day

Microsoft released updates fixing more than 1,400 vulnerabilities in Windows and other software, far above September's record of nearly 1,000 fixes. Only one flaw is a confirmed zero-day exploited in the wild: CVE-2026-96951, a security feature bypass in Windows Shell affecting Windows 10, Windows 11 and some Windows Server versions. At l…

infosecurity-magazine.com · high

Microsoft October 2026 Patch Tuesday fixes record 1,411 CVEs, including one exploited Windows Shell zero-day

Microsoft released fixes for a record 1,411 CVEs in its October 2026 Patch Tuesday on October 13, more than the roughly 1,100 issued in all of 2025 and above the records set in July and September. The surge is attributed to Microsoft's use of AI-driven vulnerability discovery, including its multi-model agentic scanning harness (MDASH). Th…

tenable.com · exploit público high

Microsoft October 2026 Patch Tuesday fixes 1,407 CVEs, including Windows Shell MOTW bypass zero-day CVE-2026-96951 exploited in the wild

Microsoft's October 2026 Patch Tuesday addresses 1,407 CVEs across 301 products and components, the largest release on record for the second consecutive month. 69 are rated critical, 1,337 important and 1 low. Two zero-days are fixed: CVE-2026-96951, a Windows Shell security feature bypass exploited in the wild, and CVE-2026-108398, a .NE…

cert.ssi.gouv.fr · high

CERT-FR: Multiple Microsoft .NET and ASP.NET Core vulnerabilities, including remote code execution, fixed in October 2026 updates

CERT-FR advisory CERTFR-2026-AVI-1313 reports multiple vulnerabilities in Microsoft .NET, ASP.NET Core and .NET Framework, covered by Microsoft's October 13, 2026 security bulletins for 43 CVEs. Some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. The advisory also l…