Microsoft Security Response Center
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
Category: Vulnerabilities & Zero-Day
Clear filters
2196 news
Page 55 of 74
Microsoft Security Response Center
CVE-2026-69328 Windows Storage Elevation of Privilege Vulnerability
Microsoft Security Response Center
CVE-2026-69288 Windows GDI+ Information Disclosure Vulnerability
Microsoft Security Response Center
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Microsoft Security Response Center
CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability
Microsoft Security Response Center
CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
Microsoft Security Response Center
CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Microsoft Security Response Center
CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability
Microsoft Security Response Center
CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
Microsoft Security Response Center
CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability
Microsoft Security Response Center
CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Infosecurity Magazine
AI-Found Vulnerabilities More Likely to Enable RCE, Google Says
CSO Online
Unsloth’s model picker had a code-execution problem
SecurityWeek
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability
Ubuntu Security Notices
USN-8854-1: OpenStack Keystone vulnerabilities
Ubuntu Security Notices
USN-8853-1: OpenSBI vulnerability
Cisco Security Advisories
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
SecurityWeek
Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks
Help Net Security
Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)
SecurityWeek
Chrome, Firefox Updates Patch Over 100 Vulnerabilities
CISA Advisories
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04…
Ubuntu Security Notices
USN-8852-1: OpenVPN vulnerabilities
CERT Polska
Vulnerabilities in YunoHost-Apps sogo_yhn software
Help Net Security
OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised
Ubuntu Security Notices
USN-8851-1: Linux kernel vulnerabilities
The Cyber Express
OpenSSL Flaw Could Expose Heap Memory and Crash Applications
Infosecurity Magazine
Apple Patches CoreGraphics Zero Day Exploited in Attacks
Ubuntu Security Notices
USN-8850-1: Linux kernel (BlueField) vulnerabilities
Security Affairs
U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog
Ubuntu Security Notices