Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 52 min 26 sec ago

CVE-2026-105714 Microsoft Office Access Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-105715 Microsoft Office Word Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-105716 Microsoft Office Access Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-105720 Microsoft Office SharePoint Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-97800 Windows Mobile Broadband Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-108458 Remote Desktop Client Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-69370 Visual Studio Code Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability

Tue, 10/13/2026 - 14:00

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

Categories: Microsoft

CVE-2026-108467 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-105717 Microsoft Office Access Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-105718 Microsoft Excel Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-105719 Microsoft SharePoint Server Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Categories: Microsoft

CVE-2026-105722 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-105723 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-105726 Microsoft Defender Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-70235 Windows Event Tracing Spoofing Vulnerability

Tue, 10/13/2026 - 14:00

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.

Categories: Microsoft

CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-105732 SysInternals Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Pages