Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws

Microsoft released patches for 138 security vulnerabilities in its product portfolio, with 30 rated Critical and 104 rated Important, none currently under active attack.

• •Windows DNS (CVE-2026-41096, CVSS 9.8) contains a heap-based buffer overflow allowing remote code execution without authentication
• •Windows Netlogon (CVE-2026-41089, CVSS 9.8) has a stack-based buffer overflow vulnerability enabling unauthorized RCE on domain controllers
• •Microsoft introduced MDASH, an AI-driven multi-model vulnerability discovery system that identified 16 flaws in Windows networking and authentication
• •Azure and Microsoft Dynamics 365 have multiple critical vulnerabilities (CVSS 9.9-10.0) requiring authentication bypass and code injection
• •