Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 7 min 10 sec ago

CVE-2026-68816 Microsoft Excel Remote Code Execution Vulnerability

Tue, 08/11/2026 - 14:00
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Categories: Microsoft

CVE-2026-68819 Windows Network File System Denial of Service Vulnerability

Tue, 08/11/2026 - 14:00
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
Categories: Microsoft

CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Tue, 08/11/2026 - 14:00
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability

Tue, 08/11/2026 - 14:00
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

Tue, 08/11/2026 - 14:00
Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
Categories: Microsoft

CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

Tue, 08/11/2026 - 14:00
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Categories: Microsoft

CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

Tue, 08/11/2026 - 14:00
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Categories: Microsoft

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Tue, 08/11/2026 - 14:00
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Categories: Microsoft

CVE-2026-65769 Microsoft Teams iOS Information Disclosure Vulnerability

Tue, 08/11/2026 - 14:00
Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.
Categories: Microsoft

CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Tue, 08/11/2026 - 14:00
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.
Categories: Microsoft

CVE-2026-70312 Powerpoint Information Disclosure Vulnerability

Tue, 08/11/2026 - 14:00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-70311 Microsoft Office Word Remote Code Execution Vulnerability

Tue, 08/11/2026 - 14:00
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Categories: Microsoft

CVE-2026-70313 Microsoft PowerPoint Remote Code Execution Vulnerability

Tue, 08/11/2026 - 14:00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability

Tue, 08/11/2026 - 14:00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-70316 Powerpoint Information Disclosure Vulnerability

Tue, 08/11/2026 - 14:00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-70315 Microsoft Office Information Disclosure Vulnerability

Tue, 08/11/2026 - 14:00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability

Tue, 08/11/2026 - 14:00
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Categories: Microsoft

CVE-2026-70318 Microsoft Excel Information Disclosure Vulnerability

Tue, 08/11/2026 - 14:00
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-70314 Microsoft Office Information Disclosure Vulnerability

Tue, 08/11/2026 - 14:00
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
Categories: Microsoft

CVE-2026-70317 Microsoft Office Information Disclosure Vulnerability

Tue, 08/11/2026 - 14:00
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
Categories: Microsoft

Pages