TheWindowsUpdate.com

Information published. Continue reading CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-45475 Microsoft Office Remote Code Execution Vulnerability→

Improper link resolution before file access (‘link following’) in .NET allows an unauthorized attacker to perform tampering locally. Continue reading CVE-2026-45491 .NET Tampering Vulnerability→

Improper authorization in .NET allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45490 .NET SDK Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-45500 Microsoft Exchange Server Spoofing Vulnerability→

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-45471 Microsoft Word Remote Code Execution Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-45479 Microsoft SharePoint Server Spoofing Vulnerability→

Improper link resolution before file access (‘link following’) in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50511 Microsoft PC Manager Elevation of Privilege Vulnerability→