Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 38 min 6 sec ago

CVE-2026-88070 Windows BitLocker Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-88071 Windows Hyper-V Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-88073 Windows Graphics Kernel Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-88074 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-68883 Microsoft SQL Server Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-70189 Microsoft SQL Server Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-83945 Microsoft SQL Server Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-85876 Microsoft SQL Server Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85886 Microsoft SQL Server Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-88098 Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-88099 Windows Failover Cluster Denial of Service Vulnerability

Tue, 10/13/2026 - 14:00

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-88100 Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-88106 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-88107 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-88132 Azure Key Vault Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.

Categories: Microsoft

CVE-2026-88136 Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-88137 WebDAV Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

Categories: Microsoft

CVE-2026-88140 Windows Key Storage Provider Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-88143 Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Pages