AI scanners find critical Windows bugs and dozens of new advisories

According to Microsoft, MDASH was used to discover 16 of the vulnerabilities fixed with the latest Patch Tuesday updates, part of the broader effort to scan their own code with AI. SecurityWeek notes that Microsoft stated 4 of these 16 were critical, including unauthenticated remote code execution flaws in components such as the Windows kernel TCP/IP stack and the IKEv2 service.

The article also highlights that Palo Alto Networks used Claude Mythos and other frontier AI models to conduct a deep scan of more than 130 products, resulting in the discovery of dozens of vulnerabilities and 26 new advisories. In total, these Palo Alto advisories cover 75 vulnerabilities, with none deemed critical and three high-severity issues requiring very specific configurations to be weaponised.

The piece, published on 13 May 2026, points to MDASH’s performance on pre-patch snapshots and its CyberGym benchmark results, and suggests a growing expectation that AI scanning will drive a surge in vulnerability discovery and patching across the industry.