Microsoft Security Response Center
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
Category: Vulnerabilities & Zero-Day
Clear filters
2198 news
Page 63 of 74
Microsoft Security Response Center
CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability
Microsoft Security Response Center
CVE-2026-69803 Windows DHCP Server Information Disclosure Vulnerability
Microsoft Security Response Center
CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Microsoft Security Response Center
CVE-2026-69637 Windows DHCP Server Denial of Service Vulnerability
Microsoft Security Response Center
CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Microsoft Security Response Center
CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability
Microsoft Security Response Center
CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability
Microsoft Security Response Center
CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
Microsoft Security Response Center
CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability
Microsoft Security Response Center
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
CSO Online
On-prem VeloCloud Orchestrator under attack, only some versions patched
Rapid7 Blog
When Business Email Compromise Starts Rewriting Reality
Help Net Security
OpenAI agent hacking spree widens to Australia, targeting government website
Infosecurity Magazine
CISA Charts New "Quality Era" for Global CVE Program
SecurityWeek
AI-Powered Campaign Targets Hundreds of Online Retailers
Ubuntu Security Notices
USN-8813-1: Expat vulnerabilities
Ubuntu Security Notices
USN-8814-1: Octavia vulnerabilities
CISA Advisories
Siemens Mendix Runtime (Update A)
CISA Advisories
Eufy Omni C20, Omni X10 Pro
CISA Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enter…
CISA Advisories
Botslab G980H Dashcams
Ubuntu Security Notices
USN-8812-1: GDAL vulnerabilities
Malwarebytes Blog
Update Chrome: 108 security fixes for desktop, new release for Android
SecurityWeek
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
CSO Online
Aviation solved the vigilance problem. AI just gave security a worse one
The Cyber Express
Apache Tomcat Update: 12 Security Flaws Fixed in Tomcat 11.0.26
CSO Online
58 hardware vulnerabilities: A guide to the threats
Help Net Security
GNOME 50.5 security fixes patch a gvfs CVE and Epiphany code injection
SecurityWeek