TheWindowsUpdate.com

Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-47656 Windows Boot Manager Security Feature Bypass Vulnerability→

Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-33113 Microsoft SharePoint Server Spoofing Vulnerability→

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-45595 Windows Mark of the Web Security Feature Bypass Vulnerability→

Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. Continue reading CVE-2026-45604 Windows Managed Installer Information Disclosure Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. Continue reading CVE-2026-45594 Windows Application Identity (AppID) Information Disclosure Vulnerability→

Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability→

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-44804 Windows DWM Core Library Elevation of Privilege Vulnerability→