TheWindowsUpdate.com

Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-25185 Windows Shell Link Processing Spoofing Vulnerability→

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-25178 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally. Continue reading CVE-2026-25166 Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-24297 Windows Kerberos Security Feature Bypass Vulnerability→

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-25170 Windows Hyper-V Elevation of Privilege Vulnerability→

Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally. Continue reading CVE-2026-25168 Windows Graphics Component Denial of Service Vulnerability→

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-25172 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability→

Information published. Continue reading CVE-2026-3494 MariaDB Server Audit Plugin Comment Handling Bypass→