TheWindowsUpdate.com

Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-45597 Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability→

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Continue reading CVE-2026-45655 Windows BitLocker Security Feature Bypass Vulnerability→

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability→

User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-45650 Microsoft Bing Search Spoofing Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-42977 Windows Push Notifications Elevation of Privilege Vulnerability→

Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally. Continue reading CVE-2026-45649 Office for Android Spoofing Vulnerability→

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-45461 Microsoft Office Remote Code Execution Vulnerability→

Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. Continue reading CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability→