Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 | Microsoft Security Blog
— No summary in stored record
Why ranked: Listed in CISA KEV · Microsoft SOC relevance
Source-backed security briefings, priority vulnerabilities and detection resources from public feeds.
Public vulnerability and advisory intelligence gathered from the configured MSRC, NIST NVD, CISA KEV and FIRST EPSS sources and other public feeds. Strictly public telemetry — no customer tenant instrumentation.
— No summary in stored record
Why ranked: Listed in CISA KEV · Microsoft SOC relevance
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Why ranked: High priority · Microsoft SOC relevance · Updated today
Analysis / inference: Certain Windows 11 updates cause RDP failures for non-admin users when Administrator protection is enabled.
Why ranked: High priority · Microsoft SOC relevance · Action required
Analysis / inference: Microsoft Azure has retired the NVv4-series virtual machines, causing remaining instances to be deallocated and stripped of SLA support.
Why ranked: High priority · Microsoft SOC relevance · Action required
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Why ranked: High priority · Microsoft SOC relevance · Updated today
— No summary in stored record
Why ranked: Microsoft SOC relevance
1676 Microsoft CVEs in the 2026-Aug security release.
Why ranked: High priority · Microsoft SOC relevance · Within 3 days
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Why ranked: High priority · Microsoft SOC relevance · Updated today
— No summary in stored record
Why ranked: Microsoft SOC relevance · Within 3 days
Analysis / inference: Windows 11 updates resolve a post-sign-in black screen condition primarily impacting Azure Virtual Desktop hosts using FSLogix profile containers.
Why ranked: High priority · Microsoft SOC relevance · Action required
| CVE ID | Product Scope | Severity Source | CVSS | EPSS Score | CISA KEV | Last Delta |
|---|---|---|---|---|---|---|
facebook react facebook · Limited verification | CRITICAL (raw) | 10.0 | 0.998 100th %ile | Listed | ||
fedoraproject fedora fedoraproject · Limited verification | CRITICAL (raw) | 10.0 | 0.995 100th %ile | Listed | ||
juniper junos juniper · Limited verification | HIGH (raw) | 7.8 | 0.994 100th %ile | Listed | ||
n8n n8n n8n · Limited verification | CRITICAL (raw) | 9.9 | 0.990 100th %ile | Listed | ||
metabase metabase metabase · Limited verification | CRITICAL (raw) | 10.0 | 0.973 100th %ile | Listed |
— or Unknown. Applicability to your environment is unknown; no tenant inventory is connected.Briefing summary as of 19 Oct 2026, 07:19 AM IST. CVE statistics load in Vulnerabilities; pipeline health shares the Collection Health status.