Security Patch
The latest Security Patch coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-53792: Azure Portal Privilege Escalation Bug Could Lead to Full Cloud Control
Microsoft has released a security update for CVE-2025-53792, a critical elevation-of-privilege vulnerability in the Azure Portal that allows authenticated attackers to bypass role-based access...
CVE-2025-8579: Google Patches Critical Gemini Live Flaw—Edge Users Must Update Too
CVE-2025-8579, a critical security flaw in Google Chrome's Gemini Live feature, has been patched after four months of quiet danger. The vulnerability, reported by researcher Alesandro Ortiz on April...
Chrome and Edge Users Alerted to Critical PiP Flaw CVE-2025-8577 as Patches Roll Out
A serious security vulnerability in the Chromium engine’s Picture-in-Picture (PiP) feature is being urgently patched by Google and Microsoft, affecting millions of users of Chrome, Edge, and other...
Chrome 139 Patches UI Spoofing Flaw That Tricks Users Into Giving Away Permissions—Edge Users Are Protected Too
Google has shipped a critical security fix for Chrome that plugs a user interface spoofing hole attackers could use to trick people into giving websites access to their camera, microphone, or...
CVE-2025-8581: The Low-Risk Chrome Extension Bug That Still Requires an Immediate Update on Edge and Chrome
Google has patched a security vulnerability in Chrome’s Extensions framework that could have allowed attackers to siphon sensitive cross-origin data from unsuspecting users. Tracked as...
CVE-2025-8578: Chrome Cast Vulnerability Sparks Urgent Updates for Chrome and Edge
A critical use-after-free vulnerability in Google Chrome’s Cast component, tracked as CVE-2025-8578, has been patched by both Google and Microsoft, after researchers confirmed that attackers could...
Critical CVE-2025-8582 DOM Vulnerability Patched in Chrome and Edge – Users Urged to Update
On August 5, 2025, Google shipped an urgent security update for Chrome that plugs a dangerous hole in the browser's Document Object Model (DOM) handling. Tracked as CVE-2025-8582, the vulnerability...
Microsoft Edge Seals Off Dangerous Filesystem Attack Vector with Latest Chromium Patch for CVE-2025-8580
Microsoft has patched a critical filesystem vulnerability in its Edge browser, CVE-2025-8580, plugging a dangerous hole that could have allowed attackers to execute arbitrary code or access...
CISA Orders Emergency Fix for Exchange Hybrid Bug Allowing 'Total Domain Compromise'
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive requiring federal agencies to patch a severe Microsoft Exchange vulnerability by August 11, warning...
CISA Sets August 11 Deadline for Critical Exchange Hybrid Patch as Exploits Emerge
The U.S. Cybersecurity and Infrastructure Security Agency issued Emergency Directive 25-02 on August 7, 2025, giving federal agencies fewer than four days to remediate a high-severity vulnerability...
Exchange Hybrid Bug Lets Attackers Quietly Escalate to Cloud Admin — Patch Now
A single compromise on a dusty, overlooked Exchange Server can now silently hand an attacker the keys to your entire Microsoft 365 kingdom — with no alarm raised and no audit trail left behind....
WSL 2.5.10 Lands: Microsoft’s Secret Security Patch for Windows 11 Explained
Microsoft shipped a terse, single-line update to the Windows Subsystem for Linux on January 15, 2025. Version 2.5.10 of WSL arrived through the Microsoft Store with no fanfare, no CVE identifiers,...