Major Tech Giants Roll Out Critical Patches to Protect Users from Exploitation
In a joint effort, Microsoft and Apple have released urgent security updates to address multiple vulnerabilities across their products. The patches aim to prevent exploitation by malicious actors, who could potentially use these flaws to gain unauthorized access or execute code on affected systems.
The majority of the fixes come from Microsoft, which addressed over a dozen critical- and high-severity issues in its software and services. Among the most concerning are three vulnerabilities with a maximum severity rating of 10/10. These include missing authentication in Planetary Computer Pro, improper authentication in Azure SQL Database, and missing authorization in Teams. If exploited, these flaws could lead to elevation of privilege (EoP) and allow attackers to gain control over affected systems.
The remaining critical- and high-severity issues that Microsoft patched this week could result in information disclosure, remote code execution (RCE), EoP, or spoofing. Some of the vulnerabilities have a CVSS score of 9.9/10, indicating they are highly exploitable over a network connection. These flaws affect various products, including Azure Service Bus, Entra Provisioning Service, Active Directory, and more.
Apple has also released a patch for a single bug tracked as CVE-2026-65400, which allows remote attackers to bypass Screen Sharing authentication. The vulnerability was included in macOS Tahoe 26.6.1, macOS Sequoia 15.7.9, and macOS Sonoma 14.8.9 updates.
It’s essential to note that these patches are a direct response to the growing threat landscape. In recent weeks, numerous security flaws have been discovered across various products and services. For instance, Microsoft patched over two dozen vulnerabilities in Office, 365 Apps for Enterprise, Edge, and Azure Cosmos DB just last week. This steady stream of updates underscores the importance of maintaining up-to-date software to prevent exploitation.
To protect themselves from potential threats, users should ensure their systems are updated immediately. This includes applying the latest security patches for Microsoft products as well as installing the Apple updates that fix CVE-2026-65400. By staying informed and taking proactive measures, individuals can significantly reduce the risk of falling victim to cyber attacks.
Source: SecurityWeek — 2026-08-07