Skip to main content
← CVE Tracker

Vendor

Microsoft

266 articles

VU
CRITICAL
Vulnerabilities

CVE-2026-50522: SharePoint RCE via Deserialization — Patch Now

CISA confirmed active exploitation of CVE-2026-50522 in Microsoft SharePoint. Attackers leverage a deserialization vulnerability to execute code remotely. Patch…

Runtime Rebel Intel
4 min read · Aug 2, 2026
CL
INFO
Cloud Security

Falcon AIDR Secures Copilot Studio & Claude Agents Against Prompt Injection

CrowdStrike Falcon AIDR extends real-time protection to Microsoft Copilot Studio and Claude agents, mitigating prompt injection and AI-native threats.

Runtime Rebel Intel
4 min read · Jul 30, 2026
Persistent Prompt Injection Risks in Microsoft 365 Copilot for Word
MEDIUM
Vulnerabilities

Persistent Prompt Injection Risks in Microsoft 365 Copilot for Word

Researchers demonstrate how hidden instructions in Word documents can persist through Microsoft 365 Copilot drafting, creating risks of malicious prompt propagation.

Runtime Rebel Intel
3 min read · Jul 30, 2026
Microsoft OWA Exploit: Russian Hackers Bypass Credential Rotations
HIGH
Threat Intel

Microsoft OWA Exploit: Russian Hackers Bypass Credential Rotations

Russian threat actors exploit a Microsoft Outlook Web Access (OWA) flaw to maintain persistent mailbox access even after passwords are changed or rotated.

Runtime Rebel Intel
4 min read · Jul 30, 2026
VU
MEDIUM
Vulnerabilities

Microsoft Secure Boot Bypass via Vulnerable Shims — Remediation Guide

An analysis of a decade-long vulnerability in Microsoft Secure Boot. Learn how vulnerable Linux shims allow attackers to bypass UEFI firmware protections.

Runtime Rebel Intel
4 min read · Jul 29, 2026
TH
INFO
Threat Intel

Windows 11 KB5101684 Preview Update Addresses 42 System Issues

Microsoft releases KB5101684 preview cumulative update for Windows 11 24H2 and 25H2, fixing 42 bugs across Start menu, Task Manager, and Sandbox environments.

Runtime Rebel Intel
3 min read · Jul 29, 2026
CVE-2024-49019: Certighost AD CS Privilege Escalation Explained
HIGH
Vulnerabilities

CVE-2024-49019: Certighost AD CS Privilege Escalation Explained

Analysis of CVE-2024-49019, the Certighost flaw in Microsoft AD CS. Learn how misconfigured certificate templates allow full Active Directory compromise.

Runtime Rebel Intel
4 min read · Jul 28, 2026
TH
INFO
Threat Intel

Microsoft MAI-Cyber-1-Flash: Performance Analysis of Security LLM

Microsoft introduces MAI-Cyber-1-Flash, its first specialized cybersecurity AI model, outperforming competitors in CyberGym benchmark testing.

Runtime Rebel Intel
3 min read · Jul 28, 2026
Microsoft MDASH Update: MAI-Cyber-1-Flash Achieves 95.95% Accuracy
INFO
Threat Intel

Microsoft MDASH Update: MAI-Cyber-1-Flash Achieves 95.95% Accuracy

Microsoft announces MAI-Cyber-1-Flash for its MDASH harness, delivering 95.95% vulnerability remediation accuracy at half the previous operational cost.

Runtime Rebel Intel
3 min read · Jul 28, 2026
Confused Deputy Flaws in Google Cloud & Azure: Admin Bypass
HIGH
Cloud Security

Confused Deputy Flaws in Google Cloud & Azure: Admin Bypass

Analysis of 'Confused Deputy' vulnerabilities across Google Cloud and Microsoft Azure, enabling administrative privilege escalation and access control bypass.

Runtime Rebel Intel
5 min read · Jul 28, 2026
CL
MEDIUM
Cloud Security

Microsoft 365 Outage: How an Automated Network Maintenance Bug Impacted Azure

Technical analysis of the Microsoft 365 and Azure outage caused by a bug in the automated network maintenance system, resulting in accidental IP route removal.

Runtime Rebel Intel
4 min read · Jul 24, 2026
BlueNoroff Zoom Phishing Kit Targets Crypto Wallets
HIGH
Threat Intel

BlueNoroff Zoom Phishing Kit Targets Crypto Wallets

BlueNoroff uses a custom phishing kit to profile crypto wallets before delivering malware through impersonated Zoom and Microsoft Teams platforms.

Runtime Rebel Intel
4 min read · Jul 24, 2026
CL
MEDIUM
Cloud Security

Microsoft Fixes Exchange Online Erroneous Mailbox Quarantine Issue

Microsoft is mitigating a service disruption where Exchange Online mailboxes were incorrectly quarantined, causing delivery failures and access issues.

Runtime Rebel Intel
4 min read · Jul 23, 2026
VU
CRITICAL
Vulnerabilities

CVE-2026-50522: SharePoint RCE Exploitation to Steal Machine Keys

Critical CVE-2026-50522 in Microsoft SharePoint is actively exploited to steal machine keys, enabling persistent access. Understand the threat and mitigation.

Runtime Rebel Intel
4 min read · Jul 21, 2026
VU
MEDIUM
Vulnerabilities

WSUS Sync Delays & Timeouts: Microsoft's Manual Fix Guidance

Microsoft provides manual steps to resolve persistent sync delays and timeouts impacting Windows Server Update Services (WSUS) deployments, affecting Windows Update…

Runtime Rebel Intel
4 min read · Jul 21, 2026
MA
HIGH
Malware

HollowGraph Malware Uses Microsoft Graph for Stealthy C2

HollowGraph malware leverages Microsoft Graph API calendar features for covert command-and-control and data exfiltration from Microsoft 365 environments.

Runtime Rebel Intel
4 min read · Jul 20, 2026
HollowGraph Malware Leverages Microsoft 365 Calendar for Stealthy C2
HIGH
Malware

HollowGraph Malware Leverages Microsoft 365 Calendar for Stealthy C2

HollowGraph, a new espionage malware, hides C2 commands and exfiltrates data via legitimate Microsoft 365 calendar events, mimicking normal Graph API traffic.

Runtime Rebel Intel
5 min read · Jul 20, 2026
VU
MEDIUM
Vulnerabilities

KB5121767: Microsoft Fixes Windows 11 Dell PC Shutdown Bug

Microsoft issues emergency out-of-band update KB5121767 to resolve critical system shutdown issues affecting Dell PCs running the July 2026 Windows 11 update.

Runtime Rebel Intel
4 min read · Jul 20, 2026
TH
MEDIUM
Threat Intel

Microsoft Investigates WSUS Server Synchronization Timeout Errors

Microsoft confirms technical issues causing WSUS synchronization delays and timeouts. Learn how this affects enterprise patch management and security.

Runtime Rebel Intel
3 min read · Jul 20, 2026
MA
HIGH
Malware

ACR Stealer Campaign Targets Microsoft Enterprise Credentials

Microsoft warns of a surge in ACR Stealer attacks targeting browser credentials and session tokens to bypass multi-factor authentication in enterprise environments.

Runtime Rebel Intel
3 min read · Jul 18, 2026
CO
INFO
Compliance

Windows Server 2022 Mainstream Support Transition: Strategic Guide

Microsoft outlines the Windows Server 2022 transition to extended support in October 2026. Learn how this lifecycle shift impacts security updates and SOC planning.

Runtime Rebel Intel
3 min read · Jul 17, 2026
CVE-2026-58644: SharePoint RCE Zero-Day Exploited in the Wild
CRITICAL
Vulnerabilities

CVE-2026-58644: SharePoint RCE Zero-Day Exploited in the Wild

CISA adds CVE-2026-58644, a critical Microsoft SharePoint Server deserialization RCE vulnerability with a CVSS 9.8, to its Known Exploited Vulnerabilities catalog.

Runtime Rebel Intel
3 min read · Jul 17, 2026
VU
CRITICAL
Vulnerabilities

Microsoft SharePoint RCE via CVE-2024-38094: Mitigation Guide

CISA adds three exploited SharePoint vulnerabilities to the KEV catalog, including CVE-2024-38094. Learn how to detect and mitigate these critical RCE flaws.

Runtime Rebel Intel
4 min read · Jul 15, 2026
VU
CRITICAL
Vulnerabilities

Microsoft July 2026 Patch Tuesday: 622 Vulnerabilities and Zero-Days

Microsoft addresses 622 vulnerabilities in the July 2026 Patch Tuesday update, including two actively exploited zero-days affecting Windows and Office.

Runtime Rebel Intel
4 min read · Jul 15, 2026