Microsoft Patches Active Windows Exploits, Addresses Azure, Office Vulnerabilities
Microsoft has released security updates to address actively exploited vulnerabilities in Windows 10, 11, and server versions. The patches also cover critical issues in Azure and Office, with some vulnerabilities allowing attackers to gain system privileges.
Key takeaways
- Microsoft has released security patches for actively exploited vulnerabilities in Windows 10, 11, and server editions.
- An exploit allows local attackers to gain system privileges through a flaw in the Windows Ancillary Function Driver for WinSock.
- Critical vulnerabilities affecting Azure and Office products have also been addressed in the latest update.
- A potential bypass for the RoguePlanet Windows Defender vulnerability is circulating but remains unverified.
Microsoft has issued its latest patch day updates, addressing critical security flaws in its Windows operating system that are currently being exploited by attackers. The updates target Windows 10, Windows 11, and various Windows Server editions. Administrators are urged to ensure Windows Update is active to install these essential security patches.
One actively exploited vulnerability, identified as CVE-2026-68820, affects the Windows component Ancillary Function Driver for WinSock. This flaw allows authenticated, local attackers to trigger memory errors by executing a special application, potentially leading to the acquisition of system-level privileges and full control over affected computers. The exact scope and method of these ongoing attacks remain unclear.
Another Windows vulnerability, CVE-2026-62832, is publicly known and poses a risk of impending attacks. This issue, located within the User Profile Service, could also enable attackers to gain administrative rights.
In addition to Windows, Microsoft has resolved several "critical" vulnerabilities in Azure, including CVE-2026-68823, which could allow for the execution of malicious code. These Azure vulnerabilities have been fixed on the server side, requiring no action from administrators. Security updates also address multiple vulnerabilities in Office (e.g., CVE-2026-63513) and other Windows components like DHCP and DNS servers.
Separately, a proof-of-concept tool named ShieldBreak is circulating, which purportedly bypasses the protection against the RoguePlanet vulnerability (CVE-2026-50656) in Windows Defender. Microsoft had recently released a patch for this specific vulnerability. However, the effectiveness and verification of ShieldBreak by independent security researchers and Microsoft are currently unconfirmed.
Sources reviewed
Project Chintan independently synthesized and analyzed information cross-checked across the sources listed above.
Related stories
