Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 17 min 34 sec ago

CVE-2026-70082 Windows DNS Denial of Service Vulnerability

Tue, 10/13/2026 - 14:00

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-70085 Role: DNS Server Tampering Vulnerability

Tue, 10/13/2026 - 14:00

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

Categories: Microsoft

CVE-2026-70083 Role: DNS Server Tampering Vulnerability

Tue, 10/13/2026 - 14:00

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

Categories: Microsoft

CVE-2026-70087 Role: DNS Server Security Feature Bypass Vulnerability

Tue, 10/13/2026 - 14:00

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

Categories: Microsoft

CVE-2026-70090 Windows Netlogon Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-70097 Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

Tue, 10/13/2026 - 14:00

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.

Categories: Microsoft

CVE-2026-70104 Windows Win32k Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70095 Windows iSCSI Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-70103 Windows Error Reporting Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70093 Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-70106 Windows Kernel Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70121 Windows Kernel Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70139 Windows Update Service Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70108 Windows Win32k Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70117 Windows Win32k Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70114 Windows Kernel Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70127 Windows Domain Name Service Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-70123 Microsoft Graphics Component Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70140 Windows Audio Service Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Pages