patch tuesday

7 articles · newest first

Cloud server infrastructure representing Microsoft Azure services patched for critical vulnerabilities

Microsoft just fixed three perfect-10 bugs in Azure and Teams — five days before Patch Tuesday

Three CVSS 10.0 vulnerabilities in Planetary Computer Pro, Azure SQL Database, and Teams got quietly patched on August 6 — completely outside Microsoft's scheduled August 11 Patch Tuesday.

Priya Nair · 3d ago · 6 min

Rows of enterprise server racks in a data center, representing Active Directory infrastructure exposed by the Certighost vulnerability

Software

Any employee's login can now become domain admin — and the exploit code is already public

A low-privileged Active Directory account is all it takes to forge a Domain Controller certificate — Microsoft patched it in July, and a working exploit just landed on GitHub.

Priya Nair · Aug 1 · 6 min

NVD detail for CVE-2026-56188 showing a Windows Server network driver RCE

Software

a 9.8 in a Windows Server network driver lets an attacker run code with nothing but network traffic

CVE-2026-56188 is a race condition in a core Windows Server network driver that an unauthenticated attacker can exploit remotely. It affects every supported Windows Server. Patch it.

Priya Nair · Jul 30 · 9 min

NVD detail for CVE-2026-60198 showing a 9.8 CRITICAL Oracle WebLogic RCE

Software

Oracle just patched five separate 9.8 bugs that hand WebLogic to an anonymous attacker. patch all of them

CVE-2026-60198 and four siblings let an unauthenticated attacker take over Oracle WebLogic Server over T3, IIOP, HTTP or SOAP. Five critical holes, one July patch — here's what to do.

Priya Nair · Jul 28 · 9 min

An IT professional with a laptop beside enterprise server racks

Software

there's an unauthenticated 9.8 in Windows RDP. we've seen how this movie ends — patch before the sequel

CVE-2026-56190 lets an attacker run code on a Windows machine over Remote Desktop with no login and no clicks. It's the same profile as BlueKeep — the RDP bug that became a worm. It isn't exploited yet. 'Yet' is the word to act on.

Priya Nair · Jul 28 · 7 min

Software

the Windows Print Spooler is a security hole again. if your servers don't print, just turn it off

CVE-2026-58608 is a fresh remote code execution flaw in the same Windows service that gave us PrintNightmare. It's on by default on virtually every Windows machine — and most servers have no reason to run it at all.

Priya Nair · Jul 24 · 7 min

A dark data center rack full of network cabling

Software

everyone rushed to patch the SharePoint zero-day. the 9.8 sitting on your DHCP server is the one that scares me

CVE-2026-50518 is an unauthenticated remote code execution flaw in Windows DHCP Server — no login, no clicks, network access is the only requirement. It got overshadowed, and Microsoft says exploitation is 'more likely.'

Priya Nair · Jul 23 · 7 min