Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 59 min 6 sec ago

CVE-2026-114161 Azure CycleCloud Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-112727 Windows Domain Name Service Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-114160 Azure Managed Grafana Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

No cwe for this issue in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-109493 Microsoft Office Access Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-109494 Microsoft Office Visio Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-109495 Microsoft Office SharePoint Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-109496 Microsoft Office Visio Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-109497 Microsoft Office SharePoint Spoofing Vulnerability

Tue, 11/10/2026 - 16:00

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Categories: Microsoft

CVE-2026-109498 Microsoft Office Access Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-109499 Microsoft Office SharePoint Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Access of resource using incompatible type ('type confusion') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-109500 Microsoft Office Word Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-109501 Microsoft Office Word Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-109502 Microsoft Office SharePoint Elevation of Privilege Vulnerability

Tue, 11/10/2026 - 16:00

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-109503 Microsoft Office Word Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-109504 Microsoft Office SharePoint Spoofing Vulnerability

Tue, 11/10/2026 - 16:00

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Categories: Microsoft

CVE-2026-109505 Microsoft Office Word Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-110043 Microsoft Office Outlook Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-110044 Microsoft Office SharePoint Remote Code Execution Vulnerability

Tue, 11/10/2026 - 16:00

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-110045 Microsoft Office SharePoint Spoofing Vulnerability

Tue, 11/10/2026 - 16:00

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Categories: Microsoft

CVE-2026-110046 Microsoft Office Word Information Disclosure Vulnerability

Tue, 11/10/2026 - 16:00

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Categories: Microsoft

Pages