Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 26 min 9 sec ago

CVE-2026-112970 Windows SMB Client Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112971 Windows SMB Client Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112972 Windows SMBv3 Server Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Integer overflow or wraparound in Windows SMB Server allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-112973 Windows Kernel Security Feature Bypass Vulnerability

Tue, 11/10/2026 - 16:00

Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.

Categories: Microsoft

CVE-2026-112974 Microsoft Account Tampering Vulnerability

Tue, 11/10/2026 - 16:00

Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally.

Categories: Microsoft

CVE-2026-112975 Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability

Tue, 11/10/2026 - 16:00

Untrusted pointer dereference in Windows Link-Layer Discovery Protocol (LLDP) allows an unauthorized attacker to deny service over an adjacent network.

Categories: Microsoft

CVE-2026-112976 Windows Print Spooler Components Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112977 Windows Deployment Services Information Disclosure Vulnerability

Tue, 11/10/2026 - 16:00

Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-112978 Windows Print Spooler Components Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112979 Windows State Repository Service Tampering Vulnerability

Tue, 11/10/2026 - 16:00

Weak authentication in Windows State Repository Service allows an authorized attacker to perform tampering locally.

Categories: Microsoft

CVE-2026-112980 Windows Print Spooler Components Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112981 Windows Print Spooler Components Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112982 Microsoft Account Tampering Vulnerability

Tue, 11/10/2026 - 16:00

Missing authentication for critical function in Microsoft Account allows an authorized attacker to perform tampering locally.

Categories: Microsoft

CVE-2026-112984 Windows USB Video Driver Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

Categories: Microsoft

CVE-2026-112985 Windows JScript Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-112986 Windows DWM Core Library Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

No cwe for this issue in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112987 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112988 Windows Desktop Window Manager Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112989 Windows Servicing Stack Updates Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112990 Windows USB Video Driver Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Pages