Everything Patch Observer has reported about Microsoft: 14 stories, newest first. Part of our Vulnerabilities coverage.
Microsoft is developing a mechanism for Edge to automatically apply security updates and feature rollouts without user interaction, according to Neowin.
Patches address high-severity remote code execution bugs in Word and Excel, alongside issues in Identity Web and MSAL libraries.
Microsoft SQL Server versions through 2022 face a high-severity flaw that allows authorized attackers to execute code over the network.
Microsoft confirms a high-severity stack-based buffer overflow in SQL Server that allows authorized users to elevate privileges over a network connection.
A use-after-free vulnerability in Microsoft Windows DHCP Server allows network-based remote code execution, demanding immediate attention from infrastructure teams.
A use-after-free error in Windows iSCSI allows unauthorized remote code execution, posing a critical risk to organizations relying on network storage protocols.
A critical heap overflow in Windows Media Foundation allows remote code execution, forcing managed service providers to prioritize patching.
A code injection flaw in the Blazor WebAssembly debugger allows remote code execution on developer workstations when expressions are evaluated.
A critical use-after-free flaw in Windows Message Queuing allows remote code execution without authentication across multiple Windows 10 and 11 builds.
Microsoft’s third-gen Maia chip aims to become the primary inference engine for its cloud services, reducing reliance on Nvidia and AMD GPUs.
The company plans multi-gigawatt rollouts of its custom Maia 300 silicon, with each rack consuming significant energy for high-density computing.
Microsoft chief warns that super-intelligence systems act as black boxes requiring robust, predictable safeguards before corporate deployment.
Circana data shows Xbox unit sales fell 33 percent year-over-year through August 2026, marking an all-time low amid record-high average console prices.
A critical deserialization flaw in Microsoft Dataverse allows network-based code execution, posing severe risks to managed service providers.