CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
Updated CWE value. This is an informational change only.
Categories: Microsoft
CVE-2026-55137 Microsoft Excel Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-50448 Windows NTFS Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-50333 Windows Spaceport.sys Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Acknowledgement Updated
Categories: Microsoft
CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability
Acknowledgement Updated
Categories: Microsoft
CVE-2026-47292 Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability
Affected software updated with new package information.
Categories: Microsoft
CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-49183 Windows Clipboard Server Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-55134 Microsoft Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-32202 Windows Shell Spoofing Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability
The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
Categories: Microsoft
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability
The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
Categories: Microsoft
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network.
Categories: Microsoft
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.
Categories: Microsoft
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Categories: Microsoft
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network.
Categories: Microsoft
