TheWindowsUpdate.com

Updated product information in the Software Update table. This is an informational change only. Continue reading CVE-2026-102870 ASP.NET Core Remote Code Execution Vulnerability→

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability→

Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder→

Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8 to 8.8. This is an informational change only. Customers who have success… Continue reading CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability→

Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in Azure Pipelines allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability→

Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only. Continue reading CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability→

Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability→