Log inCVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
20 Augustus 2026 om 16:00
Added clarifying information to the mitigation. This is an informational change only.
Normale weergave
Ontvangen — 20 Augustus 2026
⏭
Microsoft Security
-
Microsoft Security
- CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability
20 Augustus 2026 om 16:00
The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability
20 Augustus 2026 om 16:00
The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
-
- CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
20 Augustus 2026 om 16:00
Corrected the Executive Summary to clarify that the vulnerability affects Windows Device Health Attestation (DHA), not Microsoft Azure Attestation. This is an informational change only.
CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability
20 Augustus 2026 om 16:00
Updated links to security updates. This is an informational change only.
-
- CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
20 Augustus 2026 om 16:00
Corrected the Executive Summary to clarify that the vulnerability affects Windows Device Health Attestation (DHA), not Microsoft Azure Attestation. This is an informational change only.
Ontvangen — 19 Augustus 2026
⏭
Microsoft Security
CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
19 Augustus 2026 om 16:00
CWE added. Informational change only.
CVE-2020-1173 Microsoft Power BI Report Server Spoofing Vulnerability
19 Augustus 2026 om 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2021-26859 Microsoft Power BI Information Disclosure Vulnerability
19 Augustus 2026 om 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2021-41372 Power BI Report Server Spoofing Vulnerability
19 Augustus 2026 om 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2023-21806 Power BI Report Server Spoofing Vulnerability
19 Augustus 2026 om 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2024-43612 Power BI Report Server Spoofing Vulnerability
19 Augustus 2026 om 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2024-43481 Power BI Report Server Spoofing Vulnerability
19 Augustus 2026 om 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability
19 Augustus 2026 om 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2026-65811 Power BI Remote Code Execution Vulnerability
19 Augustus 2026 om 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
19 Augustus 2026 om 16:00
Acknowledgement Updated
-
- CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability
19 Augustus 2026 om 16:00
Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File System Elevation of Privilege Vulnerability** and updated the acknowledgement. These are informational changes only.
CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability
19 Augustus 2026 om 16:00
CWE added. Informational change only.
CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability
19 Augustus 2026 om 16:00
Acknowledgement Updated
CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability
19 Augustus 2026 om 16:00
Acknowledgement Updated
CVE-2026-42912 Windows Telephony Service Elevation of Privilege Vulnerability
19 Augustus 2026 om 16:00
Acknowledgement Updated
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
18 Augustus 2026 om 16:00
Acknowledgement Updated
Ontvangen — 18 Augustus 2026
⏭
Microsoft Security
-
- CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
18 Augustus 2026 om 16:00
Acknowledgement Updated
-
- CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability
CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability
18 Augustus 2026 om 16:00
Updated the Security Updates table by removing an affected software entry. No user action is required. This is an informational change only.
CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability
18 Augustus 2026 om 16:00
Acknowledgement Updated
CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability
18 Augustus 2026 om 16:00
Acknowledgement Updated
-
- CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability
18 Augustus 2026 om 16:00
Corrected the affected product from **Azure Monitor Agent Metrics Extension** to **Azure Connected Machine Agent** and updated the Security Updates table. This is an informational change only.
CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability
18 Augustus 2026 om 16:00
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability
17 Augustus 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
Ontvangen — 17 Augustus 2026
⏭
Microsoft Security
-
- CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability
17 Augustus 2026 om 16:00
Acknowledgement Updated
