Vulnerability Patching
The latest Vulnerability Patching coverage — news, analysis, and updates from the WindowsNews.AI desk.
Your USB-C Cable Can Leak Linux Kernel Memory—Here’s How to Stop It
On July 19, 2026, the Linux kernel project disclosed a vulnerability that turns any USB-C cable, dock, or charger into a potential memory snoop. CVE-2026-63963, an information-disclosure bug in the...
Critical ServiceNow RCE Flaws Under Active Attack: What Users Must Do Now
ServiceNow customers who haven’t yet patched two critical remote code execution vulnerabilities should treat their instances as compromised – not merely exposed – after the Cybersecurity and...
Microsoft’s July 14 Office Update Seals Off a Type-Confusion Flaw That Could Execute Malicious Code
Microsoft’s July 2026 Patch Tuesday delivered a critical security update for Microsoft Office, closing CVE-2026-55022 — a memory corruption vulnerability that could allow remote code execution...
Microsoft Patches .NET Bug That Lets Attackers Redirect File Operations with Symbolic Links
Microsoft released patches on July 14, 2026, for a high-severity vulnerability in .NET that could allow a locally authenticated attacker to manipulate file operations by exploiting symbolic links....
Upgrade Azure Monitor Metrics Extension to 1.65 to Block Adjacent-Network Privilege Escalation
On July 14, 2026, Microsoft published a security advisory that should jolt every Azure administrator: a critical flaw in the Azure Monitor Agent Metrics Extension could allow an attacker on the same...
Microsoft Patches Excel Flaw That Turns a Simple Spreadsheet into a Backdoor
Microsoft issued a security fix on July 14, 2026, for a flaw in Excel that can give attackers full control of a PC when a victim opens a poisoned spreadsheet. The vulnerability, tracked as...
CISA: Active SharePoint Attacks Exploit Three Flaws — Patch Now and Hunt for Breaches
On July 14, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent alert: three vulnerabilities in on-premises Microsoft SharePoint Server are being actively...
Chrome for Android 150.0.7871.47: Here’s Why You Need This Security Update Now
Chrome for Android users need to immediately check their app versions. Google has released version 150.0.7871.47 to patch a high-severity security hole, tracked as CVE-2026-13885, that could allow...
Chrome for iOS Patch Blocks Local Data Theft via Physical Access
Google pushed out a security update for Chrome on iOS that slams the door on a local attacker who gets physical access to an iPhone or iPad. The fix, delivered in version 150.0.7871.47, addresses a...
CISA Flags Critical API Flaws in iDirect iQ-Series Satellite Terminals Used Worldwide
The U.S. Cybersecurity and Infrastructure Security Agency has issued an urgent industrial-control advisory for ST Engineering iDirect iQ-Series satellite terminals, warning that two high-severity...
Patch VS Code Now: CVE-2026-47292 RCE in MSSQL Extension Hits Developer Workbenches
Microsoft has assigned CVE-2026-47292 to a remote code execution (RCE) vulnerability residing in the Visual Studio Code MSSQL extension, marking the first time this popular database tool has been...
CVE-2026-46046: Linux Kernel Ext4 Buffer-Head Leak Patched – What You Need to Know
The Linux kernel project has patched a serious vulnerability in the ext4 filesystem, tracked as CVE-2026-46046. Published by the National Vulnerability Database on May 27, 2026, the flaw stems from a...