TheWindowsUpdate.com

Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally. Continue reading CVE-2026-42832 Microsoft Office Spoofing Vulnerability→

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-33112 Microsoft SharePoint Server Remote Code Execution Vulnerability→

Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability→

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-33110 Microsoft SharePoint Server Remote Code Execution Vulnerability→

Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability→

Loop with unreachable exit condition (‘infinite loop’) in ASP.NET Core allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-42899 ASP.NET Core Denial of Service Vulnerability→

Heap-based buffer overflow in Windows Win32K – GRFX allows an authorized attacker to execute code locally. Continue reading CVE-2026-40403 Windows Graphics Component Remote Code Execution Vulnerability→

Improper control of generation of code (‘code injection’) in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. Continue reading CVE-2026-42898 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability→