{"id":78964,"date":"2026-05-14T21:38:18","date_gmt":"2026-05-14T18:38:18","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/?p=78964"},"modified":"2026-05-14T21:38:21","modified_gmt":"2026-05-14T18:38:21","slug":"mdash-vulnerability-discovery-microsoft-ai","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/","title":{"rendered":"Microsoft&#8217;s MDASH System Finds 16 Windows Vulnerabilities Using AI Agents"},"content":{"rendered":"<p class=\"wp-block-paragraph\">MDASH vulnerability discovery, Microsoft&#8217;s multi-model agentic scanning harness, identified 16 new vulnerabilities across the Windows networking and authentication stack, including four critical remote code execution flaws. The system, built by Microsoft&#8217;s Autonomous Code Security team, orchestrates more than 100 specialized AI agents to discover and validate exploitable bugs across frontier and distilled models.<\/p>\n\n<p class=\"wp-block-paragraph\">The MDASH vulnerability discovery system achieved a score of 88.45% on the public CyberGym benchmark, ranking highest on the leaderboard ahead of the second-place entry by approximately five points. In controlled testing on StorageDrive, a private device driver containing 21 deliberately injected vulnerabilities, the system identified all 21 bugs with zero false positives. Historical analysis showed 96% recall on 28 confirmed cases in clfs.sys spanning five years and 100% recall on seven cases in tcpip.sys.<\/p>\n\n<h2 class=\"wp-block-heading\">How MDASH Vulnerability Discovery Works<\/h2>\n\n<p class=\"wp-block-paragraph\">The system operates through a structured pipeline consisting of five distinct stages. The prepare stage ingests source code, builds language-aware indices, and analyzes past commits to identify attack surface and threat models. The scan stage runs specialized auditor agents over candidate code paths to emit findings with hypotheses and evidence.<\/p>\n\n<p class=\"wp-block-paragraph\">A validation stage deploys debater agents that argue for and against each finding&#8217;s reachability and exploitability. The dedup stage collapses semantically equivalent findings through patch-based grouping. Finally, the prove stage constructs and executes triggering inputs to validate vulnerabilities dynamically, using techniques such as AddressSanitizer in C\/C++ to confirm bug existence.<\/p>\n\n<p class=\"wp-block-paragraph\">The architecture employs three key properties: an ensemble of diverse models managed by MDASH rather than relying on any single model; more than 100 specialized agents, each with its own role, prompt regime, and tools tailored to specific pipeline stages; and an end-to-end pipeline with extensible plugins that allow domain experts to inject context foundation models cannot access independently, such as kernel calling conventions and lock invariants.<\/p>\n\n<h2 class=\"wp-block-heading\">Critical Vulnerabilities Found in May 2026 Patch Tuesday<\/h2>\n\n<p class=\"wp-block-paragraph\">The May 12, 2026 Patch Tuesday included 16 CVEs discovered by MDASH across Windows components. CVE-2026-33827 involved a remote unauthenticated use-after-free in tcpip.sys triggered by crafted IPv4 packets with the Strict Source and Record Route option. The vulnerability arose from improper lifetime management of a reference-counted Path object due to a race condition in the path cache cleanup routines on symmetric multiprocessing systems.<\/p>\n\n<p class=\"wp-block-paragraph\">CVE-2026-33824 represented a critical flaw in the IKEEXT service, the Windows component handling IKE and AuthIP keying for IPsec. An unauthenticated remote attacker could send a crafted IKE_SA_INIT message followed by a single IKEv2 fragment to trigger a deterministic double-free of a 16-byte heap allocation. Because IKEEXT runs as LocalSystem inside svchost.exe, this provided a pre-authentication remote code execution path into one of the highest-privilege contexts on the system.<\/p>\n\n<p class=\"wp-block-paragraph\">The root cause was a shallow memcpy operation that duplicated a packet&#8217;s receive context without copying the heap allocations it referenced. Both the queued context and the live Main Mode Security Association held the same pointer and both believed they owned it, resulting in a double-free on teardown. The vulnerability required only two UDP packets to trigger with no race condition or special timing needed.<\/p>\n\n<h2 class=\"wp-block-heading\">Why Single-Model Systems Missed These Bugs<\/h2>\n\n<p class=\"wp-block-paragraph\">The CVE-2026-33827 vulnerability escaped detection by single-model systems because the lifetime violation was not locally visible within the same function. The release of the Path reference and its later reuse were separated by non-trivial control flow including alternate branches, multiple validation checks, and several early-drop conditions. Without tracking reference ownership across these intermediate states, a single model sees two independent operations rather than a temporal dependency.<\/p>\n\n<p class=\"wp-block-paragraph\">The decisive signal also existed outside immediate context. The same logical operation appeared elsewhere with the correct order, making the vulnerable call-site an inconsistency rather than an obvious misuse. Detecting this required cross-file reasoning to identify analogous patterns, align their intent, and notice the deviation. Reachability also depended on composing multiple conditions: an input setting the SSRR flag, default configuration allowing the path, and concurrent subsystems reclaiming the object during the exposed window.<\/p>\n\n<p class=\"wp-block-paragraph\">The CVE-2026-33824 <a href=\"\/category\/ai\/\">artificial intelligence<\/a> finding spanned six source files across ike_A.c through ike_F.c. No single-file analysis could detect it. The strongest evidence that the bug was real was the correct version of the same pattern in ike_D.c. Catching this required auditor agents to surface comparisons and have the debate stage force them to stand up under cross-examination.<\/p>\n\n<h2 class=\"wp-block-heading\">Industry Implications and Future Capability<\/h2>\n\n<p class=\"wp-block-paragraph\">Microsoft stated that AI-powered vulnerability discovery has transitioned from research curiosity into production-grade defense at enterprise scale. The durable advantage lies in the agentic system around the model rather than any single model itself. MDASH is currently being used by Microsoft security engineering teams and tested by a small set of customers as part of a limited private preview.<\/p>\n\n<p class=\"wp-block-paragraph\">The team emphasized that discovery requires composition no single prompt can achieve. The <a href=\"\/category\/cybersecurity\/\">cybersecurity<\/a> bugs identified are not visible to a model examining a single function. They are visible to a system sequencing cross-file pattern comparison, multi-step reachability analysis, debate between specialized agents, and end-to-end proof construction. The architecture absorbs model improvements because targeting, debating, dedup, and proof stages do not require rewriting when a new model arrives; only configuration changes and A\/B testing are needed.<\/p>","protected":false},"excerpt":{"rendered":"<p>Microsoft&#8217;s MDASH multi-model agentic system discovered 16 Windows vulnerabilities including four critical remote code execution flaws. The AI-powered tool scored 88.45% on the CyberGym benchmark and achieved 100% recall on five years of tcpip.sys security cases.<\/p>\n","protected":false},"author":13,"featured_media":78963,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_meta-robots-noindex":"","_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_pr_autopilot_social_copy":"{\"x_hook\":\"Microsoft's MDASH found 16 Windows vulnerabilities including 4 critical RCE flaws using 100+ specialized AI agents. The multi-model system scored 88.45% on the CyberGym benchmark, outpacing competitors by 5 points.\",\"x_takeaways\":\"Key Highlights:\\n\ud83d\udd39 Found 21 of 21 injected bugs in StorageDrive with zero false positives\\n\ud83d\udd39 Achieved 100% recall on tcpip.sys MSRC cases over five years\\n\ud83d\udd39 CVE-2026-33827: Race-condition UAF in IPv4 receive path\\n\ud83d\udd39 CVE-2026-33824: Double-free in IKEv2 SA_INIT handling\\n\ud83d\udd39 88.45% accuracy on CyberGym's 1,507 real-world vulnerability tasks\"}","_yoast_wpseo_opengraph_title":"Microsoft's MDASH System Finds 16 Windows Vulnerabilities Using AI Agents","_yoast_wpseo_opengraph_description":"Microsoft's multi-model agentic scanning harness MDASH identified 16 Windows vulnerabilities including four critical flaws. The system achieved 88.45% accuracy on the CyberGym benchmark with 100% recall on historical tcpip.sys cases.","_yoast_wpseo_opengraph_image":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/05\/mdash-vulnerability-discovery-windows-ai-security.webp","_yoast_wpseo_opengraph_image_id":78963,"_yoast_wpseo_twitter_title":"Microsoft MDASH AI Finds 16 Windows Vulnerabilities","_yoast_wpseo_twitter_description":"Microsoft's MDASH vulnerability discovery system identified 16 Windows networking vulnerabilities including four critical RCE flaws in tcpip.sys and IKEv2, scoring 88.45% on the CyberGym benchmark.","_yoast_wpseo_twitter_image":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/05\/mdash-vulnerability-discovery-windows-ai-security.webp","_yoast_wpseo_twitter_image_id":78963,"_yoast_wpseo_primary_category":439,"_extra_hide_author_box":"","_extra_featured_post":"","_partner_post_id":108678,"footnotes":""},"categories":[449,439],"tags":[892,4202,4199,4201,4200],"class_list":["post-78964","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-cybersecurity","tag-ai-security","tag-autonomous-code-security","tag-mdash","tag-remote-code-execution","tag-windows-vulnerabilities","et-has-post-format-content","et_post_format-et-post-format-standard"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>MDASH Vulnerability Discovery - AI Security System | Saudi Shopper<\/title>\n<meta name=\"description\" content=\"Microsoft MDASH vulnerability discovery system finds 16 Windows CVEs with 88.45% CyberGym score. Four critical RCE flaws in tcpip.sys and IKEv2 service.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"MDASH Vulnerability Discovery - AI Security System | Saudi Shopper\" \/>\n<meta property=\"og:description\" content=\"Microsoft MDASH vulnerability discovery system finds 16 Windows CVEs with 88.45% CyberGym score. Four critical RCE flaws in tcpip.sys and IKEv2 service.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/\" \/>\n<meta property=\"og:site_name\" content=\"Saudishopper\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/SaudiShopper\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-14T18:38:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-14T18:38:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/05\/mdash-vulnerability-discovery-windows-ai-security.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Nour Elotaiby\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ssict\" \/>\n<meta name=\"twitter:site\" content=\"@ssict\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Nour Elotaiby\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/\"},\"author\":{\"name\":\"Nour Elotaiby\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/person\\\/e270afe93563c3ba9c14eea256a983d7\"},\"headline\":\"Microsoft&#8217;s MDASH System Finds 16 Windows Vulnerabilities Using AI Agents\",\"datePublished\":\"2026-05-14T18:38:18+00:00\",\"dateModified\":\"2026-05-14T18:38:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/\"},\"wordCount\":866,\"publisher\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/mdash-vulnerability-discovery-windows-ai-security.webp\",\"keywords\":[\"AI security\",\"Autonomous Code Security\",\"MDASH\",\"Remote code execution\",\"Windows vulnerabilities\"],\"articleSection\":[\"Artificial Intelligence\",\"Cybersecurity\"],\"inLanguage\":\"en-US\",\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/\",\"name\":\"MDASH Vulnerability Discovery - AI Security System | Saudi Shopper\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/mdash-vulnerability-discovery-windows-ai-security.webp\",\"datePublished\":\"2026-05-14T18:38:18+00:00\",\"dateModified\":\"2026-05-14T18:38:21+00:00\",\"description\":\"Microsoft MDASH vulnerability discovery system finds 16 Windows CVEs with 88.45% CyberGym score. Four critical RCE flaws in tcpip.sys and IKEv2 service.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/#primaryimage\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/mdash-vulnerability-discovery-windows-ai-security.webp\",\"contentUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/mdash-vulnerability-discovery-windows-ai-security.webp\",\"width\":1200,\"height\":628,\"caption\":\"MDASH vulnerability discovery system analyzing Windows kernel networking code through multi-agent AI reasoning pipeline\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/mdash-vulnerability-discovery-microsoft-ai\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft&#8217;s MDASH System Finds 16 Windows Vulnerabilities Using AI Agents\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\",\"name\":\"Saudishopper\",\"description\":\"Saudi ICT Shopper News\",\"publisher\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\",\"name\":\"Saudi ICT News\",\"alternateName\":\"Saudi ICT Shopper News\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/SSTrans.png\",\"contentUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/SSTrans.png\",\"width\":423,\"height\":165,\"caption\":\"Saudi ICT News\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/SaudiShopper\",\"https:\\\/\\\/x.com\\\/ssict\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/person\\\/e270afe93563c3ba9c14eea256a983d7\",\"name\":\"Nour Elotaiby\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"caption\":\"Nour Elotaiby\"},\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/author\\\/nour\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"MDASH Vulnerability Discovery - AI Security System | Saudi Shopper","description":"Microsoft MDASH vulnerability discovery system finds 16 Windows CVEs with 88.45% CyberGym score. Four critical RCE flaws in tcpip.sys and IKEv2 service.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/","og_locale":"en_US","og_type":"article","og_title":"MDASH Vulnerability Discovery - AI Security System | Saudi Shopper","og_description":"Microsoft MDASH vulnerability discovery system finds 16 Windows CVEs with 88.45% CyberGym score. Four critical RCE flaws in tcpip.sys and IKEv2 service.","og_url":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/","og_site_name":"Saudishopper","article_publisher":"https:\/\/www.facebook.com\/SaudiShopper","article_published_time":"2026-05-14T18:38:18+00:00","article_modified_time":"2026-05-14T18:38:21+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/05\/mdash-vulnerability-discovery-windows-ai-security.webp","type":"image\/webp"}],"author":"Nour Elotaiby","twitter_card":"summary_large_image","twitter_creator":"@ssict","twitter_site":"@ssict","twitter_misc":{"Written by":"Nour Elotaiby","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/#article","isPartOf":{"@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/"},"author":{"name":"Nour Elotaiby","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/person\/e270afe93563c3ba9c14eea256a983d7"},"headline":"Microsoft&#8217;s MDASH System Finds 16 Windows Vulnerabilities Using AI Agents","datePublished":"2026-05-14T18:38:18+00:00","dateModified":"2026-05-14T18:38:21+00:00","mainEntityOfPage":{"@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/"},"wordCount":866,"publisher":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/#primaryimage"},"thumbnailUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/05\/mdash-vulnerability-discovery-windows-ai-security.webp","keywords":["AI security","Autonomous Code Security","MDASH","Remote code execution","Windows vulnerabilities"],"articleSection":["Artificial Intelligence","Cybersecurity"],"inLanguage":"en-US","copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"}},{"@type":"WebPage","@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/","url":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/","name":"MDASH Vulnerability Discovery - AI Security System | Saudi Shopper","isPartOf":{"@id":"https:\/\/saudishopper.com.sa\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/#primaryimage"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/#primaryimage"},"thumbnailUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/05\/mdash-vulnerability-discovery-windows-ai-security.webp","datePublished":"2026-05-14T18:38:18+00:00","dateModified":"2026-05-14T18:38:21+00:00","description":"Microsoft MDASH vulnerability discovery system finds 16 Windows CVEs with 88.45% CyberGym score. Four critical RCE flaws in tcpip.sys and IKEv2 service.","breadcrumb":{"@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/#primaryimage","url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/05\/mdash-vulnerability-discovery-windows-ai-security.webp","contentUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2026\/05\/mdash-vulnerability-discovery-windows-ai-security.webp","width":1200,"height":628,"caption":"MDASH vulnerability discovery system analyzing Windows kernel networking code through multi-agent AI reasoning pipeline"},{"@type":"BreadcrumbList","@id":"https:\/\/saudishopper.com.sa\/en\/mdash-vulnerability-discovery-microsoft-ai\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/saudishopper.com.sa\/en\/"},{"@type":"ListItem","position":2,"name":"Microsoft&#8217;s MDASH System Finds 16 Windows Vulnerabilities Using AI Agents"}]},{"@type":"WebSite","@id":"https:\/\/saudishopper.com.sa\/en\/#website","url":"https:\/\/saudishopper.com.sa\/en\/","name":"Saudishopper","description":"Saudi ICT Shopper News","publisher":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/saudishopper.com.sa\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/saudishopper.com.sa\/en\/#organization","name":"Saudi ICT News","alternateName":"Saudi ICT Shopper News","url":"https:\/\/saudishopper.com.sa\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/logo\/image\/","url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2020\/08\/SSTrans.png","contentUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2020\/08\/SSTrans.png","width":423,"height":165,"caption":"Saudi ICT News"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/SaudiShopper","https:\/\/x.com\/ssict"]},{"@type":"Person","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/person\/e270afe93563c3ba9c14eea256a983d7","name":"Nour Elotaiby","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e27a3f377f4ef014b4334305e358f12befadbb055d461166d37c62c672332d9d?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","caption":"Nour Elotaiby"},"url":"https:\/\/saudishopper.com.sa\/en\/author\/nour\/"}]}},"_links":{"self":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/78964","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/comments?post=78964"}],"version-history":[{"count":1,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/78964\/revisions"}],"predecessor-version":[{"id":78965,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/78964\/revisions\/78965"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/media\/78963"}],"wp:attachment":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/media?parent=78964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/categories?post=78964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/tags?post=78964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}