Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 48 min 49 sec ago

CVE-2026-85853 Windows DWM Core Library Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85854 Windows DWM Core Library Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85855 Windows DWM Core Library Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85856 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

Categories: Microsoft

CVE-2026-85857 Windows Kernel-Mode Drivers Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-85860 Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85858 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85859 Windows Message Queuing Queue Manager Denial of Service Vulnerability

Tue, 10/13/2026 - 14:00

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

Categories: Microsoft

CVE-2026-85861 Clipboard User Service Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85863 Clipboard User Service Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85864 Python Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Improper privilege management in Python allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85865 Windows DHCP Server Security Feature Bypass Vulnerability

Tue, 10/13/2026 - 14:00

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

Categories: Microsoft

CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85870 Windows Common Log File System Driver Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85869 Microsoft Windows Search Component Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85871 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-71347 Windows Security Center Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-85881 Microsoft Office Graphics Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-85891 Azure HDInsight Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.

Categories: Microsoft

CVE-2026-85915 Windows PCI Bus Driver Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Pages