Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 53 sec ago

CVE-2026-69514 Remote Desktop Services Remote Code Execution Vulnerability

8 hours 55 min ago

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-69516 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

8 hours 55 min ago
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-69621 Role: Windows Fax Service Elevation of Privilege Vulnerability

8 hours 55 min ago

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69527 Windows USB Mass Storage Class Driver Information Disclosure Vulnerability

8 hours 55 min ago
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-69525 Remote Desktop Services Remote Code Execution Vulnerability

8 hours 55 min ago

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-69539 Remote Desktop Services Remote Code Execution Vulnerability

8 hours 55 min ago

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

8 hours 55 min ago

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69524 Windows Active Directory Domain Services Remote Code Execution Vulnerability

8 hours 55 min ago

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-69528 Windows Shell Elevation of Privilege Vulnerability

8 hours 55 min ago
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-69534 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

8 hours 55 min ago

Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69574 Windows Device Association Service Elevation of Privilege Vulnerability

8 hours 55 min ago

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69540 Windows Audio Service Elevation of Privilege Vulnerability

8 hours 55 min ago

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69549 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

8 hours 55 min ago
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-69541 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

8 hours 55 min ago

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

8 hours 55 min ago

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-69553 Windows Hyper-V Elevation of Privilege Vulnerability

8 hours 55 min ago

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-69552 Windows Print Spooler Components Information Disclosure Vulnerability

8 hours 55 min ago
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
Categories: Microsoft

CVE-2026-69554 Microsoft Windows Search Component Tampering Vulnerability

8 hours 55 min ago
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
Categories: Microsoft

CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability

8 hours 55 min ago
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
Categories: Microsoft

CVE-2026-69585 Microsoft Windows Search Component Elevation of Privilege Vulnerability

8 hours 55 min ago

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Pages