Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 8 min 4 sec ago

CVE-2026-69540 Windows Audio Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69549 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Tue, 09/08/2026 - 14:00
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-69541 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69553 Windows Hyper-V Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-69552 Windows Print Spooler Components Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
Categories: Microsoft

CVE-2026-69554 Microsoft Windows Search Component Tampering Vulnerability

Tue, 09/08/2026 - 14:00
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
Categories: Microsoft

CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
Categories: Microsoft

CVE-2026-69585 Microsoft Windows Search Component Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69608 Microsoft Windows Search Component Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69588 Windows TCP/IP Denial of Service Vulnerability

Tue, 09/08/2026 - 14:00
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
Categories: Microsoft

CVE-2026-69587 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Tue, 09/08/2026 - 14:00

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-69609 Win32k Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-69594 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69645 Windows Message Queuing Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69648 Windows Notification Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-69684 Windows Error Reporting Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-69623 Windows HTTP Print Provider Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-69689 Windows Win32k Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

Pages