Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 32 min 35 sec ago

CVE-2026-70241 Windows Kerberos Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70243 Windows Kernel Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70248 Windows Hyper-V Denial of Service Vulnerability

Tue, 10/13/2026 - 14:00

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

Categories: Microsoft

CVE-2026-70275 Windows CD-ROM File System Driver Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-70286 Windows Graphics Component Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70299 Windows Bind Filter Driver Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83569 HID Parser Library Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83586 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83741 Internet Explorer Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83769 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83911 Windows Storage Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83871 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83886 Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83912 Windows Direct Composition Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83906 Windows Shell Spoofing Vulnerability

Tue, 10/13/2026 - 14:00

Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Categories: Microsoft

CVE-2026-85841 Windows DHCP Server Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-83914 Microsoft XML Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-83916 Windows Error Reporting Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Double free in Windows Error Reporting allows an authorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-83917 Windows ALPC Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-83921 Windows Search Service Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Pages