TheWindowsUpdate.com

Updated CVE to relect that this vulnerability is in the Windows Subsystem for Linux product. Microsoft recommends that customer using this product should install the latest version to be protected. Continue reading CVE-2026-102204 Windows Subsystem for Linux Elevation of Privilege Vulnerability→

Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-70074 Windows DNS Information Disclosure Vulnerability→

Across my conversations with leaders in government, critical infrastructure and regulated industries, one priority consistently rises to the top: putting technology to work on their most important systems while maintaining the control those systems require. This challenge is becoming more important as advanced cloud and AI capabilities move into public services, regulated processes and essential…

The post Advancing digital sovereignty with greater control and choice appeared first on The Official Microsoft Blog.

Continue reading Advancing digital sovereignty with greater control and choice→

Microsoft is aware that the vulnerability for which this CVE was assigned has not been addressed. We are working to prepare and test a complete mitigation. We will update this document when there is more information. Continue reading CVE-2026-70197 .NET Remote Code Execution Vulnerability→

Updated the Security Updates table to list Microsoft Identity Web v3 and v4 separately and clarify the affected version ranges. The existing security updates are versions 3.16.0 and 4.16.1, respectively. This is an informational change only. Continue reading CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability→

Updated the Security Updates table to list Microsoft Identity Web v3 and v4 separately and clarify the affected version ranges. The existing security updates are versions 3.16.0 and 4.16.1, respectively. This is an informational change only. Continue reading CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability→

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Continue reading Chromium CVE-2026-106230: Incorrect reference resolution→