Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 20 min 55 sec ago

CVE-2026-81395 Microsoft Excel Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-81957 Microsoft Excel Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-81388 Microsoft Excel Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-81951 Microsoft Excel Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-81952 Microsoft Word Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-81959 Microsoft Excel Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-81953 Microsoft Excel Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-81949 Microsoft Excel Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-81950 Microsoft Excel Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-81948 Microsoft Excel Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-77906 Visual Studio Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-83940 Windows Device Association Service Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83939 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability

Tue, 09/08/2026 - 14:00

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-77897 Microsoft Power Automate Desktop Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83948 Microsoft Azure CLI Remote Code Execution Vulnerability

Tue, 09/08/2026 - 14:00

Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability

Tue, 09/08/2026 - 14:00

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83951 Microsoft Office Word Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-83949 Microsoft Office Word Information Disclosure Vulnerability

Tue, 09/08/2026 - 14:00

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Categories: Microsoft

Pages