TheWindowsUpdate.com

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. Continue reading CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability→

Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Power BI allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability→

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability→

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58629 DirectX Graphics Kernel Elevation of Privilege Vulnerability→

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-58627 Windows DHCP Server Denial of Service Vulnerability→

Improper link resolution before file access (‘link following’) in Window PC Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability→

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability→