Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 44 min 35 sec ago

CVE-2026-69625 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-69618 Windows SMB Client Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-69624 Active Directory Certificate Services (AD CS) Tampering Vulnerability

Tue, 09/08/2026 - 14:00
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
Categories: Microsoft

CVE-2026-69597 Windows HTTP.sys Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-69602 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-69611 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Tue, 09/08/2026 - 14:00

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69617 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-69616 Windows Remote Desktop Services Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-69630 Windows Win32k Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69610 Windows Win32k Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69613 Windows Image Acquisition Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69669 Windows Kernel Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-69680 Windows DNS Spoofing Vulnerability

Tue, 09/08/2026 - 14:00
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
Categories: Microsoft

CVE-2026-69817 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-69619 Windows exFAT File System Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-69720 Windows MIDI Service Module Elevation of Privileges Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69821 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69715 Windows Direct Show Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
Categories: Microsoft

Pages