#windows-10

Analysis · May 6, 2026 · Colten Anderson

Six zero-days in three years: the CLFS pattern Microsoft can't outrun

Microsoft patched a CLFS zero-day on April 8 but left Windows 10 without a fix for five weeks. Two unrelated ransomware groups were already using it. It was the sixth CLFS zero-day since 2022.