Out-of-band Update

Windows Update is Breaking SSDs and Recovery, and Microsoft is Scrambling to Fix It Windows SSD issues

Windows SSD issues

Windows Update is Breaking SSDs and Recovery, and Microsoft is Scrambling to Fix It

Do Son August 20, 2025

Microsoft recently rolled out the August 2025 routine security updates for all supported branches of Windows 10...

Urgent Fix: Microsoft Issues OOB Update for Windows Server 2022 Hyper-V Freeze PlayReady Leak, DRM Certificates Windows Server 2022 update Hyper-V confidential VM fix CVE-2024-49112 Microsoft Authenticator, password manager

PlayReady Leak, DRM Certificates Windows Server 2022 update Hyper-V confidential VM fix CVE-2024-49112 Microsoft Authenticator, password manager

Urgent Fix: Microsoft Issues OOB Update for Windows Server 2022 Hyper-V Freeze

Do Son May 28, 2025

According to a newly published support document from Microsoft, the company has released out-of-band update KB5061906 for...

Microsoft Releases Emergency Fix for Office 2016 Update Crashes Office 2019 Mac read only Microsoft Office Startup Boost Office 2016 update KB5002700

Office 2019 Mac read only Microsoft Office Startup Boost Office 2016 update KB5002700

Microsoft Releases Emergency Fix for Office 2016 Update Crashes

Do Son April 11, 2025

Yesterday, we reported that the April 2025 cumulative security update KB5002700 for Microsoft Office 2016 has triggered...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intel📅 Updated: Sep 27, 2026
CVE-2026-88771
Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
Admin intel📅 Updated: Sep 27, 2026
CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 23, 2026
CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026

CVE-2026-88771CVSS 9.5
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37,...
📅 Updated: Sep 27, 2026
CVE-2026-88772CVSS 9.5
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before...
📅 Updated: Sep 27, 2026
CVE-2026-88773CVSS 9.3
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This...
📅 Updated: Sep 27, 2026
CVE-2026-100741CVSS 9.8
Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows,...
📅 Updated: Sep 27, 2026
CVE-2026-96625CVSS 9.1
fedify-dev/fedify repository advisory GHSA-q9f8-5hc7-898f
📅 Updated: Sep 27, 2026
CVE-2026-94130CVSS 9.3
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection...
📅 Updated: Sep 27, 2026
CVE-2026-97161CVSS 9.2
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
📅 Updated: Sep 27, 2026
CVE-2026-97163CVSS 10.0
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
📅 Updated: Sep 27, 2026