6 reportsPriority High
Microsoft Windows Video ActiveX Control Vulnerability
A newly disclosed vulnerability in Microsoft Windows could allow remote code execution if exploited, posing a risk to UK organisations using affected systems.
First report Latest
What is going on
- A vulnerability in the Microsoft Windows Video ActiveX Control was disclosed, allowing remote code execution through a specially crafted web page.
- The issue was added to CISA's Known Exploited Vulnerabilities catalogue, indicating active exploitation in the wild.
- New vulnerabilities in .NET were reported, including an inefficient algorithmic complexity issue and a path traversal flaw.
- Microsoft released patch updates in October 2026, alongside Snort rule updates for detected threats.
- A UEFI bootkit named BlackX was found to have infected fully patched Windows machines, raising concerns about Secure Boot protections.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority MediumType VulnerabilityLead report
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
- Priority LowType Research & news
Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms
- Priority LowType Research & news
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
- Priority LowType Vulnerability
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
- Priority LowType Vulnerability
Path Traversal in .NET allows an authorized attacker to elevate privileges locally
- Priority LowType Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network