AMD AMD Gainsborough APU Leaked With 2,400 MHz iGPU and 24 GB of DDR5-9600 GAMES Whispers in the Fog Gameplay Teaser Reveals First-Person Psychological Horror Mechanics GAMES Unofficial Tekken 6 PC Port Adds Rollback Netcode and 4K Graphics STEAM Fish Them All! demo launches on Steam Next Fest with 100 million fish goal and UFO automation STEAM Indie dev threatens $200 Steam item ransom for AI clone of Dragon’s Chronicles FSR Horizon Forbidden West Playable Badge Misleading as Steam Deck Performance Drops to 19 FPS ANDROID Samsung Galaxy XCover Scan leaks with built-in UHF RFID chip AMD AMD Ryzen AI 7 HX 455 leaks with 8 cores and 16-CU Radeon 890M GPU STEAM PAYDAY: Aces High launches November 5 for $24.99 on SteamVR and Quest STEAM RPG Maker U2U Map Data Created in Free Demo Carries Over to Full Release NINTENDO Zelda Ocarina of Time 3D Switch 2 download size leaks at 27 GB, largest mainline entry GAMES Call of Duty: Modern Warfare 4 Patch 1.110 Fixes Credits Bug but Stucks Some Players in Opening Menu GAMES Kuro Game’s Phantom Blade Zero Hits Xbox Game Pass, Enabling Free Play for Subscribers NVIDIA GTA 5 mod lets you talk to every NPC in cloned voices with under 1 second latency

Microsoft MDASH AI System Identifies 16 Critical Windows Flaws Before Exploitation

NicoGG 2 min read

Microsoft unveils MDASH, an AI system that identified 16 critical Windows vulnerabilities including remote code execution bugs before they could be exploited.

Microsoft MDASH AI System Identifies 16 Critical Windows Flaws Before Exploitation
SOFTWARE AND UPDATES

Microsoft has introduced MDASH, an artificial intelligence system designed to identify security vulnerabilities in Windows before attackers can exploit them. The company announced the system on May 12, 2026, highlighting its ability to discover critical flaws during the testing phase. MDASH successfully located 16 security issues in Windows that were subsequently patched in the same month's Patch Tuesday release.

New tool finds security issues before hackers can exploit them

The system detected four critical remote code execution bugs, including CVE-2026-33827 and CVE-2026-33824. CVE-2026-33827 resides in tcpip.sys and is triggered by crafted IPv4 packets. CVE-2026-33824 is a pre-authentication double-free vulnerability in the IKEEXT service, which is reachable over UDP port 500. MDASH utilized over 100 specialized agents across frontier and distilled models to find these defects.

MDASH ranked at the top of the public CyberGym benchmark with a score of 88.45 percent. This performance outpaced Anthropic's Mythos Preview, which scored 83.1 percent, and OpenAI's GPT-5.5, which achieved 81.8 percent. In private testing against confirmed Microsoft Security Response Center cases in clfs.sys and tcpip.sys, the system achieved 100 percent recall for tcpip.sys and 96 percent recall for clfs.sys.

Microsoft currently offers MDASH in a limited private preview for a small group of enterprise customers. The company expects broader availability to follow in the months ahead. The system represents a shift toward automated vulnerability hunting, with Microsoft stating that MDASH proved its worth by finding flaws before any attacker could get to them.

Source: NotebookCheck

Related stories