Microsoft's latest Patch Tuesday addresses 398 security vulnerabilities, including a critical zero-day flaw (CVE-2026-68820) in a Windows kernel driver that is actively being exploited. The vulnerability affects network socket operations and allows attackers with existing system access to escalate privileges to SYSTEM level, earning a CVSS score of 7.0.
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That patch goes out first. The flaw is tracked as CVE-2026-68820 (CVSS score: 7.0) and is the only
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
