Microsoft

CVE-2026-70109 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-70116 Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.

Categories: Microsoft

CVE-2026-70149 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-70186 ASP.NET Core Denial of Service Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-70174 .NET Remote Code Execution Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-70159 ASP.NET Core Denial of Service Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-70161 .NET Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70165 .NET Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70175 ASP.NET Core Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-70196 ASP.NET Core Denial of Service Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-70179 ASP.NET Core Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-70181 ASP.NET Core Denial of Service Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-70183 ASP.NET Core Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-70190 .NET Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Categories: Microsoft

CVE-2026-70197 .NET Remote Code Execution Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-70194 .NET Framework Security Feature Bypass Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.

Categories: Microsoft

CVE-2026-70268 Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-70220 Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Categories: Microsoft

Pages

Subscribe to Geeksultant aggregator - Microsoft