TheWindowsUpdate.com

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-42831 Microsoft Office Remote Code Execution Vulnerability→

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-40382 Windows Telephony Service Elevation of Privilege Vulnerability→

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-42825 Windows Telephony Service Elevation of Privilege Vulnerability→

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-40418 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability→

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally. Continue reading CVE-2026-40401 Windows TCP/IP Denial of Service Vulnerability→

Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability→

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-41097 Secure Boot Security Feature Bypass Vulnerability→

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-40361 Microsoft Word Remote Code Execution Vulnerability→