Log inCVE-2026-102208 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
23 Oktober 2026 om 16:00
Acknowledgement Updated
Normale weergave
Vandaag ontvangen — 24 Oktober 2026
⏭
Microsoft Security
-
Microsoft Security
- CVE-2026-102208 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Gisteren ontvangen — 23 Oktober 2026
⏭
Microsoft Security
-
- CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability
23 Oktober 2026 om 16:00
Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8 to 8.8. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
22 Oktober 2026 om 16:00
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
22 Oktober 2026 om 16:00
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability
22 Oktober 2026 om 16:00
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
22 Oktober 2026 om 16:00
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
-
- CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
22 Oktober 2026 om 16:00
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
-
- CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
22 Oktober 2026 om 16:00
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability
22 Oktober 2026 om 16:00
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.
CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability
22 Oktober 2026 om 16:00
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.
Ontvangen — 22 Oktober 2026
⏭
Microsoft Security
CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability
21 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-83709 Windows NTLM Elevation of Privilege Vulnerability
21 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability
21 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability
21 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
Ontvangen — 21 Oktober 2026
⏭
Microsoft Security
CVE-2026-97783 Microsoft Office SharePoint Spoofing Vulnerability
21 Oktober 2026 om 16:00
The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release. Microsoft recommends updating to the most current release of the SharePoint server.
Ontvangen — 20 Oktober 2026
⏭
Microsoft Security
CVE-2026-102204 Windows Subsystem for Linux Elevation of Privilege Vulnerability
20 Oktober 2026 om 16:00
Updated CVE to relect that this vulnerability is in the Windows Subsystem for Linux product. Microsoft recommends that customer using this product should install the latest version to be protected.
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
20 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
20 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-96913 Windows Kernel Elevation of Privilege Vulnerability
20 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-70074 Windows DNS Information Disclosure Vulnerability
20 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-83839 Windows Hyper-V Elevation of Privilege Vulnerability
20 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
20 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-70197 .NET Remote Code Execution Vulnerability
19 Oktober 2026 om 16:00
Microsoft is aware that the vulnerability for which this CVE was assigned has not been addressed. We are working to prepare and test a complete mitigation. We will update this document when there is more information.
Ontvangen — 19 Oktober 2026
⏭
Microsoft Security
CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability
19 Oktober 2026 om 16:00
Updated the Security Updates table to list Microsoft Identity Web v3 and v4 separately and clarify the affected version ranges. The existing security updates are versions 3.16.0 and 4.16.1, respectively. This is an informational change only.
Ontvangen — 17 Oktober 2026
⏭
Microsoft Security
-
- CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
16 Oktober 2026 om 16:00
Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.
CVE-2026-109468 ASP.NET Core Denial of Service Vulnerability
16 Oktober 2026 om 16:00
Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.
CVE-2026-85790 Microsoft QUIC Information Disclosure Vulnerability
16 Oktober 2026 om 16:00
Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.
CVE-2026-70186 ASP.NET Core Denial of Service Vulnerability
16 Oktober 2026 om 16:00
Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.
CVE-2026-70181 ASP.NET Core Denial of Service Vulnerability
16 Oktober 2026 om 16:00
Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.
-
- CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability
CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability
16 Oktober 2026 om 16:00
Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.
