Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 25 min 41 sec ago

CVE-2026-69784 Windows Hello Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-58599 HEVC Video Extensions Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Categories: Microsoft

CVE-2026-64918 Microsoft Office Spoofing Vulnerability

Tue, 09/08/2026 - 14:00
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
Categories: Microsoft

CVE-2026-47297 Microsoft SQL Server Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
Categories: Microsoft

CVE-2026-70565 Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70574 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70567 Windows Display Enhancement Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70568 Windows Defender Firewall Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70569 Windows Spaceport.sys Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70573 Windows Biometric Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70572 Windows Biometric Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70575 Windows Schannel Denial of Service Vulnerability

Tue, 09/08/2026 - 14:00

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-70581 Windows Biometric Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70577 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70578 Windows Credential Guard Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70579 Windows Mobile Broadband Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.

Categories: Microsoft

CVE-2026-70583 Windows Core Messaging Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71349 Windows Spaceport.sys Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

Categories: Microsoft

CVE-2026-71342 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71352 Windows Remote Access Connection Manager Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.

Categories: Microsoft

Pages