Do Son Microsoft's September 2026 Patch Tuesday fixes two zero-day flaws, CVE-2026-81963 and CVE-2026-85880, both exploited in the wild.
Elevation of Privilege
A public PoC for CVE-2026-47301 chains SCCM flaws to reach SYSTEM-level code execution from a plain domain user. Details and exploit code are disclosed.
A public PoC for CVE-2026-0075 exposes an Android elevation of privilege in ContactsProvider2 with no user interaction. Details are now disclosed.
A public PoC for CVE-2026-66804 escalates a standard Windows user to SYSTEM via the Cross Device Service. Details and exploit code are now disclosed.
Certighost AD CS vulnerability details and PoC code for CVE-2026-54121 are public. The flaw let a low-privileged user impersonate a Domain Controller.
CVE-2026-49176 is a Windows WalletService elevation of privilege flaw. Full details and a public PoC exploit are out, so patch Windows now.
A public proof-of-concept details the Windows AppResolver LPE (CVE-2026-50454), a UAC bypass that chains an admin token to a SYSTEM shell.
Urgent: Public PoC exploit code released for YellowKey (BitLocker bypass) and GreenPlasma (SYSTEM elevation). Windows 11 and Server 2025 are at high risk.
Windows Defender "RedSun" zero-day revealed! This unpatched EoP flaw turns antivirus into a delivery tool for malicious payloads. PoC is public—patch now!
Microsoft Feb 2026 update fixes 61 flaws, including critical DWM zero-day CVE-2026-21519 exploited in the wild. Patch now to stop SYSTEM takeover.
Microsoft patches a high-severity Windows DWM flaw that allows low-level users to seize SYSTEM privileges via a rendering brush error. PoC availabe.
Microsoft's July 2025 Patch Tuesday fixes 140 flaws, including a SQL Server zero-day (CVE-2025-49719), multiple RCEs, critical Office/Word bugs, and AMD CPU-level threats.
Security researcher has released PoC exploit code for CVE-2024-21345, a high-severity Windows Kernel Elevation of Privilege vulnerability