TheWindowsUpdate.com

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50399 Windows Kernel Elevation of Privilege Vulnerability→

Incorrect access of indexable resource (‘range error’) in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability→

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-54131 Microsoft Excel Remote Code Execution Vulnerability→

Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50427 Content Delivery Manager Elevation of Privilege Vulnerability→

Access of resource using incompatible type (‘type confusion’) in SQL Server allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-54116 Microsoft SQL Server Information Disclosure Vulnerability→

Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network. Continue reading CVE-2026-50365 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability→

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-50471 Windows NTFS Remote Code Execution Vulnerability→