Threats Tagged 'patch-tuesday'

The threat intelligence report from September 14, 2026, details multiple cyber incidents including data breaches, vulnerabilities, and AI-related threats. Notably, a data breach at Mathspace was caused by exploitation of CVE-2026-72898, a SQL injection vulnerability in the self-hosted Metabase tool, exposing user names, emails, usernames, and locations. Other significant vulnerabilities include Microsoft’s Patch Tuesday addressing 974 flaws including privilege escalation zero-days, and GitLab’s critical path traversal vulnerability CVE-2026-85706 allowing unauthenticated arbitrary file reads. MikroTik RouterOS vulnerabilities enabling passwordless SSH and privilege escalation were also fixed. The report includes AI threats involving prompt evasion and sandbox escapes. Check Point IPS provides protections for several mentioned vulnerabilities. The report does not specify affected versions for CVE-2026-72898. No CVSS score is provided for this vulnerability.

Microsoft addressed a bug that caused Microsoft Teams and Outlook to fail launching on ARM-based Windows devices following updates released since the August 2026 Patch Tuesday. This issue affected users on ARM Windows PCs, preventing normal operation of these applications.

Microsoft released the September 2026 Patch Tuesday updates to fix a known issue that caused Windows desktop settings to be lost or reset on some devices. This bug affected user configurations but was addressed by the official update.

Major chipmakers AMD, Arm, and Nvidia have released security advisories addressing multiple vulnerabilities in their GPU-related products. AMD fixed a NULL pointer dereference flaw in its Linux GPU kernel driver that could cause system crashes and denial-of-service conditions. Arm patched nine vulnerabilities in its Mali GPUs affecting kernel and userspace drivers, potentially leading to memory access issues and denial-of-service. Nvidia updated its Triton Inference Server for Linux to fix two high-severity flaws that could cause denial-of-service, information disclosure, and data tampering. These patches have been released or are scheduled for release in stages across affected product lines.

Multiple critical and high-severity vulnerabilities affecting industrial control system (ICS) products from Schneider Electric, Siemens, Aveva, and Rockwell Automation were disclosed and patched in the September 2026 Patch Tuesday cycle. Notably, Schneider Electric fixed a critical authentication vulnerability in Modicon M580 controllers (CVE-2026-3869, CVSS 9.2), and Siemens addressed critical flaws in several products including Reyrolle 7SR5 and Industrial Edge Management. Aveva and Rockwell Automation also released patches for high-severity issues in their ICS components. These vulnerabilities could impact the security of critical industrial infrastructure if left unpatched.

Microsoft's September 2026 Patch Tuesday release addresses 973 vulnerabilities across multiple products, including 113 critical issues. Among these, several vulnerabilities have been exploited in the wild, notably CVE-2026-81963 (Windows Update Stack) and CVE-2026-85880 (Windows ALPC), both elevation of privilege flaws with CVSS scores of 7.8. The update also includes multiple remote code execution vulnerabilities with high CVSS scores, such as CVE-2026-69676 (Windows Kerberos) with a score of 8.8 and CVE-2026-69730 (Windows DNS Server) with a score of 9.8. Microsoft highlights some vulnerabilities as more likely to be exploited and others as less likely. The vulnerabilities affect a broad range of Microsoft products including Windows components, Azure services, and Microsoft SQL Server. No explicit patch links are provided in the source, but these vulnerabilities are part of the official monthly security update. The vendor manages remediation through this update.

Microsoft released the Windows 10 KB5122878 extended security update as part of the September 2026 Patch Tuesday. This update includes security fixes addressing a record 966 vulnerabilities across Microsoft products, including two zero-day exploits that were actively exploited. It also contains bug fixes and improvements such as enhanced Secure Boot certificate deployment, time zone adjustment for Morocco, improved logging for OMA DM Client, and fixes for Remote Desktop audio redirection and BitLocker Group Policy issues. No new features are included, and Microsoft reports no known issues with this update.

Microsoft's September 2026 Patch Tuesday addresses a record 966 vulnerabilities, including two zero-day flaws that are actively exploited. This update represents a significant security release covering a broad range of issues across Microsoft products.

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

A known issue affecting Microsoft Teams and the new Outlook on ARM-based Windows devices causes crashes and launch failures after installing August 2026 Patch Tuesday updates. The problem impacts devices running Windows 11 24H2 or later, particularly those that have not installed Microsoft Store updates. Microsoft has provided a temporary workaround involving updating the Auto Super Resolution Package and is working on a permanent fix in a future Windows update.