Month: August 2026

Access of resource using incompatible type (‘type confusion’) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-70339 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability→

Information published. Continue reading CVE-2026-62702 Windows Graphics Kernel Denial of Service Vulnerability→

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability→

Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability→

Improper neutralization of special elements used in an os command (‘os command injection’) in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62693 Windows MIDI Service Module Elevation of Privileges Vulnerability→

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-70323 Microsoft Office Information Disclosure Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability→