Microsoft Security Response Center
CVE-2026-83521 Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
آرشیو ۹۰ روزه
همهٔ اخبار
جستوجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحهٔ اصلی خودش لینک دارد.
دسته: سیستمعامل
پاک کردن فیلترها
۹۶۹ خبر
صفحهٔ ۱۰ از ۳۳
Microsoft Security Response Center
CVE-2026-83516 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-83510 Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-83504 Windows SmartScreen Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-83500 Windows BitLocker Security Feature Bypass Vulnerability
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Microsoft Security Response Center
CVE-2026-83499 Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-81969 Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-81964 Windows Update Orchestrator Service Security Feature Bypass Vulnerability
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-72969 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-72968 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-72955 Windows Application Compatibility Cache Elevation of Privilege Vulnerability
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-72934 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70580 Windows Credential Guard Spoofing Vulnerability
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
Microsoft Security Response Center
CVE-2026-70566 Windows Schannel Elevation of Privilege Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70285 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70284 Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70280 Windows Hello Security Feature Bypass Vulnerability
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-70278 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70274 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70273 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70272 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70271 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70253 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70249 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70247 HTTP.sys Remote Code Execution Vulnerability
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
Microsoft Security Response Center
CVE-2026-70245 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70235 Windows Event Tracing Spoofing Vulnerability
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
Microsoft Security Response Center
CVE-2026-70233 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70225 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70223 Windows Console Driver Elevation of Privilege Vulnerability
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.