Log in
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Added clarifying information to the mitigation. This is an informational change only.
Lees weergave
CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability
The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability
The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
Corrected the Executive Summary to clarify that the vulnerability affects Windows Device Health Attestation (DHA), not Microsoft Azure Attestation. This is an informational change only.
CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability
Updated links to security updates. This is an informational change only.
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
Corrected the Executive Summary to clarify that the vulnerability affects Windows Device Health Attestation (DHA), not Microsoft Azure Attestation. This is an informational change only.
CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
CWE added. Informational change only.
CVE-2020-1173 Microsoft Power BI Report Server Spoofing Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2021-26859 Microsoft Power BI Information Disclosure Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2021-41372 Power BI Report Server Spoofing Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2023-21806 Power BI Report Server Spoofing Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2024-43612 Power BI Report Server Spoofing Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2024-43481 Power BI Report Server Spoofing Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2026-65811 Power BI Remote Code Execution Vulnerability
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
Acknowledgement Updated
CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability
Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File System Elevation of Privilege Vulnerability** and updated the acknowledgement. These are informational changes only.
CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability
CWE added. Informational change only.
CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability
Acknowledgement Updated
CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability
Acknowledgement Updated
CVE-2026-42912 Windows Telephony Service Elevation of Privilege Vulnerability
Acknowledgement Updated
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
Acknowledgement Updated
CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability
Updated the Security Updates table by removing an affected software entry. No user action is required. This is an informational change only.
CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability
Acknowledgement Updated
CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability
Acknowledgement Updated
CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability
Corrected the affected product from **Azure Monitor Agent Metrics Extension** to **Azure Connected Machine Agent** and updated the Security Updates table. This is an informational change only.
CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
