CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
Opinions, tips, and news orbiting Microsoft
Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Continue reading Chromium CVE-2026-106267: Missing authorization
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Continue reading Chromium CVE-2026-106267: Missing authorization
Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged. Continue reading CVE-2026-70179 ASP.NET Core Elevation of Privilege Vulnerability
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69795 Windows Clipboard Server Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. Continue reading CVE-2026-83695 Windows Event Logging Service Information Disclosure Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-72969 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Access of resource using incompatible type (‘type confusion’) in DNS Server allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-83642 Windows Domain Name Service Remote Code Execution Vulnerability