Oggi Microsoft ha rilasciato il Patch Tuesday più grande di sempre, un aggiornamento imponente che corregge 206 vulnerabilità, inclusi 3 zero-day. Si tratta di un aggiornamento di sicurezza particolarmente importante. Proprio per questo dovresti attualizzare il tuo Windows all’ultima versione, quella più recente. Tra le 206 vulnerabilità ce ne sono 32 critiche.
- Nuance PowerScribe (CVE-2026-26142)
- Microsoft Azure Kubernetes Service (CVE-2026-32193)
- Microsoft Office SharePoint (CVE-2026-33113)
- Microsoft Azure Attestation service and Device Health Attestation Service (CVE-2026-33828)
- Windows Ancillary Function Driver for WinSock (CVE-2026-34335)
- Microsoft Dynamics 365 (on-premises) (CVE-2026-40371)
- Visual Studio Code (CVE-2026-40376)
- Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-40404)
- Windows Universal Disk Format File System Driver (UDFS) (CVE-2026-40409)
- Microsoft Kinect (CVE-2026-41092)
- Azure Stack Edge (CVE-2026-41098)
- Microsoft Windows DNS (CVE-2026-41108)
- M365 Copilot (CVE-2026-42824)
- Windows Projected File System Filter Driver (CVE-2026-42828)
- Windows Administrator Protection (CVE-2026-42829)
- Microsoft Teams for Android (CVE-2026-42835)
- Function Discovery Service (fdwsd.dll) (CVE-2026-42836)
- Windows Projected File System Filter Driver (CVE-2026-42837)
- Microsoft PowerToys (CVE-2026-42902)
- Windows Kerberos (CVE-2026-42903)
- Windows TCP/IP (CVE-2026-42904)
- Windows DWM Core Library (CVE-2026-42905)
- Windows Shell (CVE-2026-42906)
- Windows Shell (CVE-2026-42907)
- Windows RDP (CVE-2026-42908)
- Remote Desktop Client (CVE-2026-42909)
- Windows Hotpatch Monitoring Service (CVE-2026-42910)
- Windows Ancillary Function Driver for WinSock (CVE-2026-42911)
- Windows Telephony Service (CVE-2026-42912)
- Remote Desktop Client (CVE-2026-42913)
- Windows Kerberos (CVE-2026-42914)
- Windows TCP/IP (CVE-2026-42915)
- Windows NT OS Kernel (CVE-2026-42916)
- Windows Telephony Service (CVE-2026-42968)
- Windows Push Notifications (CVE-2026-42969)
- Windows Push Notifications (CVE-2026-42970)
- Windows Push Notifications (CVE-2026-42971)
- Role: Windows Hyper-V (CVE-2026-42972)
- Windows Push Notifications (CVE-2026-42973)
- Windows Performance Monitor (CVE-2026-42974)
- Windows Push Notifications (CVE-2026-42977)
- Windows Push Notifications (CVE-2026-42978)
- Windows Push Notifications (CVE-2026-42979)
- Windows NT OS Kernel (CVE-2026-42980)
- Windows Performance Monitor (CVE-2026-42981)
- Windows DWM Core Library (CVE-2026-42983)
- Windows Kernel (CVE-2026-42984)
- Remote Desktop Client (CVE-2026-42985)
- Microsoft Graphics Component (CVE-2026-42986)
- Windows Deployment Services (CVE-2026-42987)
- Winlogon (CVE-2026-42989)
- Windows Push Notifications (CVE-2026-42991)
- Remote Desktop Client (CVE-2026-42992)
- Remote Desktop Client (CVE-2026-42993)
- Remote Desktop Client (CVE-2026-44799)
- Remote Desktop Client (CVE-2026-44801)
- Windows DWM Core Library (CVE-2026-44802)
- Windows Win32K – GRFX (CVE-2026-44803)
- Windows DWM Core Library (CVE-2026-44804)
- Windows Network Controller (NC) Host Agent (CVE-2026-44805)
- Windows DWM Core Library (CVE-2026-44807)
- Windows DWM Core Library (CVE-2026-44808)
- Windows Common Log File System Driver (CVE-2026-44809)
- Windows Cryptographic Services (CVE-2026-44810)
- Windows DWM Core Library (CVE-2026-44811)
- Windows Win32K – GRFX (CVE-2026-44812)
- Windows DWM Core Library (CVE-2026-44813)
- Windows DWM Core Library (CVE-2026-44814)
- Windows DHCP Client (CVE-2026-44815)
- Microsoft Office Excel (CVE-2026-44817)
- Microsoft Office Excel (CVE-2026-44818)
- Microsoft Office (CVE-2026-44819)
- Microsoft Office Excel (CVE-2026-44820)
- Microsoft Office (CVE-2026-44821)
- Microsoft Office Excel (CVE-2026-44822)
- Microsoft Office Excel (CVE-2026-44823)
- Microsoft Office (CVE-2026-44824)
- Microsoft Office SharePoint (CVE-2026-45453)
- Microsoft Office SharePoint (CVE-2026-45454)
- Microsoft Office Excel (CVE-2026-45455)
- Microsoft Office (CVE-2026-45456)
- Microsoft Office Word (CVE-2026-45457)
- Microsoft Office (CVE-2026-45458)
- Microsoft Office Excel (CVE-2026-45459)
- Microsoft Office (CVE-2026-45460)
- Microsoft Office (CVE-2026-45461)
- Microsoft Office SharePoint (CVE-2026-45462)
- Microsoft Office (CVE-2026-45463)
- Microsoft Office SharePoint (CVE-2026-45464)
- Microsoft Office SharePoint (CVE-2026-45465)
- Microsoft Office Word (CVE-2026-45466)
- Microsoft Office SharePoint (CVE-2026-45467)
- Microsoft Office SharePoint (CVE-2026-45468)
- Microsoft Office Excel (CVE-2026-45469)
- Microsoft Office Word (CVE-2026-45471)
- Microsoft Office (CVE-2026-45472)
- Microsoft Office (CVE-2026-45474)
- Microsoft Office (CVE-2026-45475)
- Linux MANA Driver (CVE-2026-45476)
- Microsoft Office SharePoint (CVE-2026-45479)
- Microsoft Office SharePoint (CVE-2026-45481)
- GitHub Copilot and Visual Studio Code (CVE-2026-45482)
- Microsoft Office Project (CVE-2026-45483)
- Microsoft Office SharePoint (CVE-2026-45484)
- Microsoft Office (CVE-2026-45485)
- Microsoft Office Word (CVE-2026-45486)
- Windows Program Compatibility Assistant Service (CVE-2026-45487)
- .NET (CVE-2026-45490)
- .NET (CVE-2026-45491)
- Microsoft Copilot (CVE-2026-45497)
- Microsoft Exchange Server (CVE-2026-45500)
- Microsoft Exchange Server (CVE-2026-45501)
- Microsoft Exchange Server (CVE-2026-45502)
- Microsoft Exchange Server (CVE-2026-45503)
- Microsoft Exchange Server (CVE-2026-45504)
- Microsoft Exchange Server (CVE-2026-45583)
- Windows Collaborative Translation Framework (CVE-2026-45586)
- Windows Secure Boot (CVE-2026-45588)
- ASP.NET Core (CVE-2026-45591)
- Windows Internet (wininet.dll) (CVE-2026-45592)
- Windows SDK (CVE-2026-45593)
- Windows Application Identity (AppID) Subsystem (CVE-2026-45594)
- Windows Mark of the Web (MOTW) (CVE-2026-45595)
- Windows Ancillary Function Driver for WinSock (CVE-2026-45596)
- UI Automation Manager (uiamanager.dll) (CVE-2026-45597)
- Windows Ancillary Function Driver for WinSock (CVE-2026-45598)
- Universal Plug and Play (upnp.dll) (CVE-2026-45599)
- Windows Kernel-Mode Drivers (CVE-2026-45600)
- Windows Ancillary Function Driver for WinSock (CVE-2026-45601)
- Windows DHCP Server (CVE-2026-45602)
- Windows Ancillary Function Driver for WinSock (CVE-2026-45603)
- Windows Application Identity (AppID) Subsystem (CVE-2026-45604)
- Windows Bluetooth Service (CVE-2026-45605)
- Microsoft UxTheme Library (uxtheme.dll) (CVE-2026-45606)
- Windows Hyper-V (CVE-2026-45607)
- Windows DHCP Client (CVE-2026-45608)
- Windows DHCP Server (CVE-2026-45634)
- Universal Plug and Play (upnp.dll) (CVE-2026-45635)
- Windows NTFS (CVE-2026-45636)
- Windows DWM Core Library (CVE-2026-45637)
- Windows Ancillary Function Driver for WinSock (CVE-2026-45638)
- Windows RDP (CVE-2026-45639)
- Windows Bluetooth Port Driver (CVE-2026-45640)
- Role: Windows Hyper-V (CVE-2026-45641)
- Microsoft Azure Attestation service and Device Health Attestation Service (CVE-2026-45642)
- Microsoft Office Word (CVE-2026-45643)
- Microsoft Live Share Canvas SDK (CVE-2026-45644)
- Microsoft Office (CVE-2026-45645)
- Microsoft Defender for Endpoint (CVE-2026-45647)
- Active Directory Domain Services (CVE-2026-45648)
- Office for Android (CVE-2026-45649)
- Microsoft Bing (CVE-2026-45650)
- Windows Kernel (CVE-2026-45653)
- Windows Secure Boot (CVE-2026-45654)
- Windows BitLocker (CVE-2026-45655)
- Windows UEFI (CVE-2026-45656)
- Windows Kernel (CVE-2026-45657)
- Windows BitLocker (CVE-2026-45658)
- Visual Studio Code (CVE-2026-47281)
- Visual Studio Code (CVE-2026-47284)
- Visual Studio Code (CVE-2026-47287)
- Windows Kerberos (CVE-2026-47288)
- Remote Desktop Client (CVE-2026-47289)
- Windows HTTP.sys (CVE-2026-47291)
- Visual Studio Code (CVE-2026-47292)
- Microsoft Office Click-To-Run (CVE-2026-47293)
- Microsoft Office SharePoint (CVE-2026-47298)
- Microsoft Exchange Server (CVE-2026-47631)
- Microsoft Office SharePoint (CVE-2026-47634)
- Microsoft Office (CVE-2026-47635)
- Microsoft Office SharePoint (CVE-2026-47636)
- Microsoft Office SharePoint (CVE-2026-47637)
- Microsoft Office SharePoint (CVE-2026-47638)
- Microsoft Office SharePoint (CVE-2026-47639)
- Microsoft Office SharePoint (CVE-2026-47640)
- Microsoft Office SharePoint (CVE-2026-47641)
- Azure Stack Edge (CVE-2026-47643)
- Copilot Chat (Microsoft Edge) (CVE-2026-47644)
- Windows Storage (CVE-2026-47648)
- Windows Hyper-V (CVE-2026-47652)
- Remote Desktop Client (CVE-2026-47653)
- Remote Desktop Client (CVE-2026-47654)
- Microsoft Graph (CVE-2026-47655)
- Windows Boot Manager (CVE-2026-47656)
- Microsoft Office SharePoint (CVE-2026-48560)
- Microsoft Office SharePoint (CVE-2026-48562)
- Remote Desktop Client (CVE-2026-48563)
- Windows Narrator Braille (CVE-2026-48565)
- Windows DWM Core Library (CVE-2026-48566)
- Azure HorizonDB (CVE-2026-48567)
- Windows Secure Boot (CVE-2026-48568)
- Visual Studio Code (CVE-2026-48569)
- Windows Secure Boot (CVE-2026-48570)
- Windows Secure Boot (CVE-2026-48573)
- Windows Media (CVE-2026-48574)
- Windows Secure Boot (CVE-2026-48575)
- Windows Secure Boot (CVE-2026-48576)
- Windows Secure Boot (CVE-2026-48578)
- Microsoft Exchange Online (CVE-2026-48579)
- Windows Kernel (CVE-2026-48583)
- HTTP/2 (CVE-2026-49160)
- Microsoft PC Manager (CVE-2026-49161)
- Windows BitLocker (CVE-2026-50507)
- Windows NTLM (CVE-2026-50508)
- Windows Kernel (CVE-2025-10263)
- Windows UEFI (CVE-2026-8863)
Tra le 206 vulnerabilità corrette da Microsoft una è stata resa pubblica
Gli esperti di Malwarebytes hanno precisato che, tra le 206 vulnerabilità corrette da Microsoft, una è stata resa pubblica. Si tratta di una falla in Windows BitLocker identificata come CVE-2026-50507 (punteggio CVSS : 6,8 su 10). “Un malfunzionamento del meccanismo di protezione di Windows BitLocker consente a un utente malintenzionato non autorizzato di aggirare una funzionalità di sicurezza tramite un attacco fisico“, spiega la descrizione.