TheWindowsUpdate.com

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. Continue reading CVE-2026-33842 Windows File Explorer Information Disclosure Vulnerability→

Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability→

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. Continue reading CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability→

Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Power BI allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability→

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability→

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58629 DirectX Graphics Kernel Elevation of Privilege Vulnerability→

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-58627 Windows DHCP Server Denial of Service Vulnerability→