Microsoft Security Response Center
CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
12481 news
Page 139 of 417
Microsoft Security Response Center
CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
Microsoft Security Response Center
CVE-2026-105732 SysInternals Elevation of Privilege Vulnerability
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-105727 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
Microsoft Security Response Center
CVE-2026-105726 Microsoft Defender Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-105725 Windows Security App Elevation of Privilege Vulnerability
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-105723 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
Microsoft Security Response Center
CVE-2026-105722 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-105720 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Microsoft Security Response Center
CVE-2026-105719 Microsoft SharePoint Server Information Disclosure Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Microsoft Security Response Center
CVE-2026-105718 Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105717 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105716 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105715 Microsoft Office Word Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105714 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105713 Microsoft Office SharePoint Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
Microsoft Security Response Center
CVE-2026-105599 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105598 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105597 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105596 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105595 Microsoft Office Access Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105593 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105592 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-105591 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-102867 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Microsoft Security Response Center
CVE-2026-102866 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
Microsoft Security Response Center
CVE-2026-102865 Microsoft Office SharePoint Information Disclosure Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.