Microsoft Security Response Center
CVE-2026-83641 Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
13037 news
Page 154 of 435
Microsoft Security Response Center
CVE-2026-83635 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-83584 Windows Smart Card Elevation of Privilege Vulnerability
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-83583 Windows Geotag Broker Elevation of Privilege Vulnerability
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-83580 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-83575 Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-83571 Windows Audio Service Information Disclosure Vulnerability
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-83521 Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
Microsoft Security Response Center
CVE-2026-83518 RPC Runtime Elevation of Privilege Vulnerability
Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-83516 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-83515 RPC Runtime Information Disclosure Vulnerability
Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.
Microsoft Security Response Center
CVE-2026-83510 Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-83504 Windows SmartScreen Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-83500 Windows BitLocker Security Feature Bypass Vulnerability
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Microsoft Security Response Center
CVE-2026-83499 Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-81969 Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-81964 Windows Update Orchestrator Service Security Feature Bypass Vulnerability
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-72969 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-72968 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-72955 Windows Application Compatibility Cache Elevation of Privilege Vulnerability
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-72934 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70580 Windows Credential Guard Spoofing Vulnerability
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
Microsoft Security Response Center
CVE-2026-70566 Windows Schannel Elevation of Privilege Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70285 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70284 Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70280 Windows Hello Security Feature Bypass Vulnerability
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-70278 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70274 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70273 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.