Microsoft Security Response Center
CVE-2026-69633 Windows Update Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
آرشیو ۹۰ روزه
همهٔ اخبار
جستوجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.
دسته: سیستمعامل
پاک کردن فیلترها
۹۸۲ خبر
صفحهٔ ۱۵ از ۳۳
Microsoft Security Response Center
CVE-2026-69521 Windows iSCSI Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-69387 Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69363 Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
Microsoft Security Response Center
CVE-2026-69354 Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-68836 Windows kernel32.dll Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-61931 Windows Perception Simulation Service Elevation of Privilege Vulnerability
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-49785 UEFI Secure Boot Security Feature Bypass Vulnerability
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-108468 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-108466 Windows Kernel Denial of Service Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-108462 Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-108461 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-108460 Windows Message Queuing Remote Code Execution Vulnerability
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-108457 Microsoft Windows PDF Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-108400 HEVC Video Extensions Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
Microsoft Security Response Center
CVE-2026-105725 Windows Security App Elevation of Privilege Vulnerability
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-105723 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
Microsoft Security Response Center
CVE-2026-105722 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-102227 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
Microsoft Security Response Center
ADV260001 ADV260001 Hardening changes for ReFS volumes on removable media
Starting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the [Resilient File System (ReFS)](https://learn.microsoft.com/windows-server/storage/refs/refs-overview). This change is not enable by default until 2027. Please see [Hardening changes for ReFS volumes on removable media](https://support.microsoft.com/en-us/servicing/os/windows/docs/2026/10/hardening-change…
CyberInsider
LineageOS 24 lands with Android 17 and upgrade limits for older devices
LineageOS has announced version 24.0, based on Android 17, bringing newer software to supported devices while setting an official upgrade ceiling for hardware running older Linux kernels. The release also details continued security maintenance across earlier branches, including backported fixes for older Android versions and limitations that prevent some legacy devices from receiving the same … The post LineageOS 24…
CISA Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enter…
Rapid7 Blog
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0. Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a speci…
CERT-Bund
[UPDATE] [hoch] Red Hat OpenShift für Windows Containers (WMCO): Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift für Windows Containers ausnutzen, um Administratorrechte zu erlangen und vertrauliche Informationen offenzulegen.
CERT-Bund
[UPDATE] [hoch] Red Hat Enterprise Linux (openexr): Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (openexr) ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen und um einen Denial of Service Angriff durchzuführen.
CERT-Bund
[UPDATE] [mittel] Linux Kernel: Schwachstelle ermöglicht Denial of Service
Ein lokaler Angreifer kann eine Schwachstelle in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.
CERT-Bund
[UPDATE] [hoch] Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service auszulösen, Dateien zu manipulieren oder Informationen offenzulegen.