Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
CISA KEV deadline
CVE-2026-33824
Assessment context
CISA deadline passed 66 days ago
Weekly briefing
Week 34 · 17 Aug – 23 Aug 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
39 source records · 23 groupsSecuritySharePoint
Microsoft SharePoint Weak Authentication Vulnerability
CISA KEV deadline
CVE-2026-55040
Assessment context
CISA deadline passed 66 days ago
SecurityAzure / Azure Arc2 source records
Published vulnerability · 2 entries
- Azure Arc Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-65816
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Arc Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69555
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityAzure / Microsoft Entra2 source records
Published vulnerability · 2 entries
- Microsoft Entra ID Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69851
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Microsoft Entra ID Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69836
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityAzure13 source records
Published vulnerability · 13 entries
- Azure Data Factory Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-62834
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Data Factory Information Disclosure Vulnerability
Published vulnerability
CVE-2026-66800
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Data Manager for Energy Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69419
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
Show the other 10 entries
- Azure Logic Apps Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69400
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-65770
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure SQL Database Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-66309
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure SQL Database Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-68782
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure SQL Database Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-68789
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure SQL Database Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69502
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Stack HCI Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69519
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Virtual Machines Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-69543
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Microsoft Copilot in Azure Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69855
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Microsoft Partner Center Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69558
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityExchange
Microsoft Exchange Online Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-65801
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityMicrosoft 365 Apps / Microsoft Fabric
Microsoft Fabric Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-63509
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityMicrosoft 365 Apps
Microsoft Word Information Disclosure Vulnerability
Published vulnerability
CVE-2026-70105
Assessment context
Microsoft states that customer action is required
SecurityWindows2 source records
Published vulnerability · 2 entries
- Microsoft Remote Help Denial of Service Vulnerability
Published vulnerability
CVE-2026-55015
Assessment context
Microsoft states that customer action is required
- Windows Remote Help Defense Spoofing Vulnerability
Published vulnerability
CVE-2026-55013
Assessment context
Microsoft states that customer action is required
Updates and guidanceDefender2 source records
Product news · 2 entries
- Defender for Endpoint Android 1.0.9212.0102
Product news · Defender for Endpoint Android releases
- Defender for Endpoint iOS 1.1.80120102
Product news · Defender for Endpoint iOS releases
SecurityCloudflare
WAF - Leaked credentials detection now scans Authorization headers
Security advisory · Cloudflare WAF changelog
Assessment context
SecurityMicrosoft Edge
Edge 151.0.4129.101: Chromium security fixes
Security advisory · Microsoft Edge security release notes
Message CenterDefender
MC1457836: Tenant will be auto-enabled into Microsoft Defender Unified RBAC
Message Center · Plan for change · Reference tenants · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
Assessment context
Microsoft marks it a major change
SecurityVMware vCenter Server
Broadcom VMware vCenter Path Traversal Vulnerability
Broadcom · exploited, added to CISA KEV
CVE-2026-59310
Assessment context
CISA lists it as exploited, including by ransomware
SecuritymacOS
Apple macOS Improper Authentication Vulnerability
Apple · exploited, added to CISA KEV
CVE-2026-65400
Assessment context
CISA lists it as exploited
SecurityMicrosoft Copilot Information Disclosure Vulnerability
Microsoft Copilot Information Disclosure Vulnerability
Published vulnerability
CVE-2026-24301
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityMicrosoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Added to CISA KEV
CVE-2026-33824
Assessment context
CISA lists it as exploited
SecuritySharePoint
Microsoft SharePoint Weak Authentication Vulnerability
Added to CISA KEV
CVE-2026-55040
Assessment context
CISA lists it as exploited
SecurityOracle Database / Oracle E-Business Suite / Oracle Java / Oracle WebLogic Server
Oracle Critical Security Patch Update Advisory - August 2026
Security news · Oracle Security Alerts
SecuritySentinel
Smarter signals, broader coverage: UEBA anomalies on top of Behaviors layer and new data sources
Security news · Microsoft Sentinel Blog
Message CenterDefender / Purview
MC1255406: (Updated) Microsoft Purview | Data Security Triage Agent Summaries for DLP Alerts in Microsoft Defender XDR
Notice updated · Reference tenants · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR, Microsoft Purview
Assessment context
Microsoft marks it a major change
SecurityCloudflare
WAF - WAF Release - 2026-08-17
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2026-65640
CVE-2026-65640
SecurityGitLab
GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11
Security advisory · GitLab patch releases
Assessment context
The vendor rates it critical
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.