#patch-tuesday
9 articles
ZCyerNews has published 22 articles on Patch Tuesday between 12 April 2026 and 14 October 2026. The most-covered vulnerabilities include CVE-2026-27681, which carries a CVSS score of 9.9, alongside CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, and CVE-2026-34659, each rated 9.6. Coverage spans enterprise, government, technology, enterprise software, and financial services sectors, with reporting focused on Global and United States regions. Across the 22 articles, the severity mix comprises 8 high, 10 critical, and 4 medium vulnerabilities.
HIGHMicrosoft Patches Record 1,413 Flaws, Including Exploited Windows
Microsoft's October 2026 Patch Tuesday fixes 1,413 CVEs, led by CVE-2026-96951 (CVSS 8.8), a Windows Mark of the Web bypass exploited in the wild and added to CISA KEV.
CRITICALMicrosoft Patches 964 Flaws, Two Zero-Days Exploited in Wild
CVE-2026-81963 and CVE-2026-85880 are Windows EoP zero-days exploited before patch. Microsoft's Sept 2026 Patch Tuesday fixes a record 964 CVEs—patch now.
CRITICALAdobe Patches 52 Flaws Across 10 Products, Two Critical in Connect
Adobe's May 2026 patch batch fixes 52 CVEs across 10 products; Adobe Connect gets two critical bugs (CVE-2026-34659, 9.6 CVSS for RCE; CVE-2026-34660, 9.3 CVSS for privilege...
HIGHMicrosoft Patches 120 Flaws in May 2026 Patch Tuesday Update
Microsoft's May 2026 Patch Tuesday fixes 120 vulnerabilities across Windows 11 25H2, 24H2, and 23H2. KB5089549 and KB5087420 include security fixes, Xbox mode, and batch file...
CRITICALMicrosoft Patches 137 Flaws, SSO Plugin Bug Rated Critical
CVE-2026-41103 in Microsoft SSO Plugin for Jira & Confluence allows privilege escalation via flawed authentication.
CRITICALSAP Patches Critical S/4HANA, Commerce Flaws with 9.6 CVSS
SAP released 15 security notes for May 2026, fixing two critical code injection flaws in S/4HANA (CVE-2026-34260) and Commerce (CVE-2026-34263), both rated 9.6 CVSS, and a...
HIGHMicrosoft Patches Windows win32kfull Local Privilege Escalation Vulnerability
Microsoft has patched a local privilege escalation vulnerability (CVE-2026-33104) in the Windows win32kfull driver, which could allow authenticated attackers to gain SYSTEM privileges. The flaw was disclosed by the Zero Day Initiative.
CRITICALSAP Patches Critical SQL Injection Flaw in Business Planning and Consolidation
SAP has patched a critical SQL injection vulnerability (CVE-2026-27681, CVSS 9.9) in its Business Planning and Consolidation and Business Warehouse applications, allowing attackers to execute arbitrary database commands.
HIGHMicrosoft Patches Exploited SharePoint Zero-Day Among 161 Vulnerabilities
Microsoft's April 2025 Patch Tuesday addresses 161 CVEs, including an actively exploited zero-day in SharePoint Server (CVE-2025-27088) and a critical RCE in Windows DNS (CVE-2025-27080).
Stay Updated
Get the latest cybersecurity news delivered to your inbox.