Microsoft’s MDASH AI Vulnerability Scanner Finds Four Critical Windows RCEs

Microsoft’s agentic security system found four critical Windows RCE flaws

Microsoft responded to growing competition in AI security by announcing that its new agentic security system helped researchers discover 16 new vulnerabilities in the Windows networking and authentication stack, including four critical remote code execution (RCE) vulnerabilities. MDASH architecture diagram (Source: Microsoft) Two of the four flaws — CVE-2026-40361 and CVE-2026-40364 — were deemed by Microsoft to be more likely to be exploited. T…

Microsoft’s MDASH AI vulnerability scanner finds four critical Windows RCEs

Microsoft has joined the ranks of companies using artificial intelligence models to look for vulnerabilities in large codebases, and said its MDASH scanner found four critical remote code execution (RCE) bugs in Windows. These were in the TCP/IP networking stack in the Windows kernel, the Internet Key Exchange (IKE) version 2 and Netlogon services, as well as the domain name service (DNS) application programming interface (API) library, Microso…