Month: June 2026

Improper authorization in .NET allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45490 .NET SDK Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-45500 Microsoft Exchange Server Spoofing Vulnerability→

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-45471 Microsoft Word Remote Code Execution Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-45479 Microsoft SharePoint Server Spoofing Vulnerability→

Improper link resolution before file access (‘link following’) in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50511 Microsoft PC Manager Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-45501 Microsoft Exchange Server Spoofing Vulnerability→

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-49160 HTTP.sys Denial of Service Vulnerability→

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Continue reading Chromium: CVE-2026-11148 Inappropriate implementation in Payments→