TheWindowsUpdate.com

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability→

Improper link resolution before file access (‘link following’) in Microsoft OneDrive allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability→

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-64916 Microsoft SharePoint Server Spoofing Vulnerability→

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability→

Improper control of generation of code (‘code injection’) in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability→

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-68805 Microsoft Excel Remote Code Execution Vulnerability→

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-66810 Microsoft Office Word Information Disclosure Vulnerability→