Microsoft Security Response Center
CVE-2026-70087 Role: DNS Server Security Feature Bypass Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
13072 news
Page 158 of 436
Microsoft Security Response Center
CVE-2026-70085 Role: DNS Server Tampering Vulnerability
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
Microsoft Security Response Center
CVE-2026-70083 Role: DNS Server Tampering Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.
Microsoft Security Response Center
CVE-2026-70082 Windows DNS Denial of Service Vulnerability
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-70079 Windows DNS Denial of Service Vulnerability
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-70077 Windows Kernel Information Disclosure Vulnerability
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70076 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70064 Windows Kerberos Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70063 Windows Kernel Information Disclosure Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70062 Windows libarchive Remote Code Execution Vulnerability
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70060 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70059 Windows OLE Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70058 Windows DHCP Server Remote Code Execution Vulnerability
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70057 Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-70056 Windows Update Service Elevation of Privilege Vulnerability
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70033 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-70027 Windows Subsystem for Linux Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70026 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70025 Windows Netlogon Denial of Service Vulnerability
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-70021 Windows Direct Composition Elevation of Privilege Vulnerability
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70017 Windows Secure Kernel Mode Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70015 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70014 Windows Cryptographic Services Remote Code Execution Vulnerability
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70010 Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69979 Windows AppX Deployment Service Security Feature Bypass Vulnerability
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-69978 Microsoft Windows VMSwitch Denial of Service Vulnerability
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
Microsoft Security Response Center
CVE-2026-69976 Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-69974 Desktop Window Manager Information Disclosure Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-69973 Windows libarchive Tampering Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Microsoft Security Response Center
CVE-2026-69971 Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.