Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

MDASH is a multi-model AI agentic system designed to autonomously discover, validate, and prove exploitable vulnerabilities in complex codebases like Windows.

• •More than 100 specialized AI agents work together across an ensemble of models, with auditor agents flagging potential issues, debater agents validating findings, and prover agents establishing vulnerability evidence.
• •The system uses different models for specific roles: state-of-the-art models for reasoning, distilled models for high-volume validation, and separate SOTA models for independent counterpoint analysis.
• •MDASH discovered 16 vulnerabilities that were fixed in this month's Patch Tuesday release, including two critical remote code execution flaws (CVE-2026-33824 with CVSS 9.8 and CVE-2026-33827 with CVSS 8.1).
• •The system leverages past CVE data and patches to construct specialized agents, with architecture designed for portability across model generations.