LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

Microsoft CVEs

Every Microsoft vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

33Tracked CVEs 15Known exploited 14Critical 9.0+ 1Covered this week

All Known exploited Critical High This week

33 CVEs EPSSCoverage

9.8CVSS 3.1 CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability Microsoft · Windows 10 Version 1607 EPSS 0.61% 1 story 4 months ago 9.8CVSS 3.1 CVE-2026-56190 Remote Desktop Protocol Remote Code Execution Vulnerability Microsoft · Windows 10 Version 1607 EPSS 0.97% 1 story 4 months ago 9.6CVSS 3.1 CVE-2026-55008 Microsoft Exchange Server Spoofing Vulnerability Microsoft · Exchange Server 2016 Cumulative Update 23 EPSS 0.86% 1 story 4 months ago 6.1CVSS 3.1 CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability Microsoft · Windows 10 Version 1607 EPSS 0.48% 1 story 4 months ago 7.8CVSS 3.1 CVE-2026-33825 Exploited Ransomware Microsoft Defender Elevation of Privilege Vulnerability Microsoft · Defender EPSS 6.9% 1 story 5 months ago 9.8CVSS 3.1 CVE-2026-41089 Windows Netlogon Remote Code Execution Vulnerability Microsoft · Windows Server 2012 EPSS 78% 1 story 5 months ago 9.8CVSS 3.1 CVE-2026-41096 Windows DNS Client Remote Code Execution Vulnerability Microsoft · Windows 11 version 23H2 EPSS 2.7% 1 story 5 months ago 9.1CVSS 3.1 CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability Microsoft · Confluence SAML SSO plugin EPSS 5.4% 1 story 5 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.