TheWindowsUpdate.com

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-48574 Windows Media Remote Code Execution Vulnerability→

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-45588 Secure Boot Security Feature Bypass Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-48560 Microsoft SharePoint Server Spoofing Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-47641 Microsoft SharePoint Server Spoofing Vulnerability→

External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-47643 Azure Stack Edge Remote Code Execution Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-47639 Microsoft SharePoint Server Spoofing Vulnerability→

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-47293 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-47638 Microsoft SharePoint Server Spoofing Vulnerability→