Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 32 min 43 sec ago

CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71332 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71334 Windows NFS Portmapper Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71338 Windows Failover Cluster Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71340 Windows File History Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71339 Windows Installer Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71350 Windows Spaceport.sys Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

Categories: Microsoft

CVE-2026-71348 Windows Spaceport.sys Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

Categories: Microsoft

CVE-2026-72926 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71343 Windows Remote Access Connection Manager Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-71341 Windows Partition Management Driver Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-71353 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71345 Windows Spaceport.sys Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-72929 Windows Installer Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71351 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-72930 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-72935 Windows NTFS Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-72939 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Tue, 09/08/2026 - 14:00

Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-72944 Role: Windows Fax Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-72946 Microsoft Storage Port Driver Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Pages