InfoSecBulletin Cybersecurity for mankind
Microsoft’s January 2026 updates address 114 vulnerabilities, including critical remote code execution bugs in Office apps and Windows services like LSASS.
This Patch Tuesday fixes critical vulnerabilities that allow remote code execution and several privilege escalation problems that could let attackers take over systems.
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
By infosecbulletin
/ Tuesday , August 18 2026
A big security flaw in the Forminator Forms WordPress plugin might let unapproved users upload harmful PHP files. This could...
Read More
Apple Patches 28 Security Flaws in macOS, iOS, and iPadOS
By infosecbulletin
/ Tuesday , August 18 2026
Apple has put out security updates for macOS, iOS, and iPadOS. These updates fix 28 problems that could let users...
Read More
DoNot (APT-C-35) Targeting Bangladesh Military Personnel
By infosecbulletin
/ Monday , August 17 2026
Bangladesh's military and defense system is actively under targeted attack linked to DoNot Team, or APT-C-35, as stated in a...
Read More
McDonald’s, Vodafone Affected by Azure Theft Campaign Exposing Millions of Records
By infosecbulletin
/ Sunday , August 16 2026
A large Azure data theft campaign is surfacing on the dark web. A hacker is offering employee lists taken from...
Read More
NIST to Modernize NVD in the Age of Artificial Intelligence
By infosecbulletin
/ Sunday , August 16 2026
National Institute of Standards and Technology (NIST) demands feedback from industry and the government on how to update the National...
Read More
ALERT
Multiple TP-Link Flaws Allow to Bypass Auth and Escalate Privileges
By infosecbulletin
/ Friday , August 14 2026
TP-Link has revealed several serious security flaws in Aginet networking products managed by ISPs. This includes mesh systems, routers, PON...
Read More
LiteLLM supply chain attack reveals 153GB of stolen credentials online
By infosecbulletin
/ Friday , August 14 2026
153GB record surface online stolen during the LiteLLM supply chain attack linked to thousands of corporate domains, including AWS, Samsung,...
Read More
PATCHCORD Backdoor Targets Telecom and CII In South Asia
By infosecbulletin
/ Friday , August 14 2026
A previously undocumented backdoor called PATCHCORD actively target telecom and critical information infrastructure (CII) in South Asia. According to Acronis...
Read More
Fortinet Fixes Multiple Flaws in FortiWeb, FortiManager, and FortiClient
By infosecbulletin
/ Friday , August 14 2026
Fortinet has released fixes for a set of authentication flaws in its FortiWeb, FortiManager, and FortiClient products. It warns admins...
Read More
“City-Forum” Campaign
“City-Forum” Campaign Attacks Salesforce and ServiceNow Instances Worldwide
By infosecbulletin
/ Thursday , August 13 2026
A data theft plan is stealing information from anonymous users on Salesforce Experience Cloud and ServiceNow customer portals using special...
Read More
The number of bugs in each vulnerability category is listed below:
| Vulnerability Type | Count |
|---|---|
| Remote Code Execution | 22 |
| Denial of Service | 2 |
| Elevation of Privilege | 57 |
| Information Disclosure | 22 |
| Security Feature Bypass | 3 |
| Spoofing | 5 |
| Tampering | 3 |
| Total | 114 |
Zero-Day Vulnerabilities:
CVE-2026-20805 has high-severity flaws in Desktop Windows Manager that can expose information. CVE-2026-21265 relates to digital media handling that can lead to privilege escalation, often used in chained attacks. CVE-2023-31096 seems to be a backported or related fix included in cumulative updates.
| CVE ID | Component | Type | Severity | Key Notes |
|---|---|---|---|---|
| CVE-2026-20805 | Desktop Windows Manager | Information Disclosure | Important (High per Check Point) | Allows unauthorized access to sensitive data; patched January 13, 2026 |
| CVE-2026-21265 | Windows Digital Media | Elevation of Privilege | Not specified | Enables local privilege escalation |
| CVE-2023-31096 | Unknown (legacy) | Zero-day (contextual) | Not specified | Included in January 2026 updates despite earlier assignment |
Click here for the full list.
