Security Briefs
Page 10 of 110.
Alerts tracked
2625
Security flaws we track for Upstate SC businesses.
Known exploited
503
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
43
Fresh additions to that CISA list since the first of the month.Feeds last synced Aug 19, 2026, 6:00 AM UTC.
Showing page 10 (24 alerts) of 2625.
Microsoft SharePoint Server Tampering vulnerability
Microsoft SharePoint Server Tampering vulnerability (CVE-2026-63512) was added to Microsoft’s security update guidance. Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft SharePoint Server Spoofing vulnerability
Microsoft SharePoint Server Spoofing vulnerability (CVE-2026-62917) was added to Microsoft’s security update guidance. Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Security Feature Bypass vulnerability
Microsoft Exchange Server Security Feature Bypass vulnerability (CVE-2026-62915) was added to Microsoft’s security update guidance. Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Spoofing vulnerability
Microsoft Exchange Server Spoofing vulnerability (CVE-2026-62914) was added to Microsoft’s security update guidance. Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Denial of Service vulnerability
Microsoft Exchange Server Denial of Service vulnerability (CVE-2026-62912) was added to Microsoft’s security update guidance. Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Elevation of Privilege vulnerability
Microsoft Exchange Server Elevation of Privilege vulnerability (CVE-2026-62911) was added to Microsoft’s security update guidance. Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Elevation of Privilege vulnerability
Microsoft Exchange Server Elevation of Privilege vulnerability (CVE-2026-62910) was added to Microsoft’s security update guidance. Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Windows Backup Engine Elevation of Privilege vulnerability
Windows Backup Engine Elevation of Privilege vulnerability (CVE-2026-62908) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows DWM Core Library Elevation of Privilege vulnerability
Windows DWM Core Library Elevation of Privilege vulnerability (CVE-2026-62894) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Deployment Services TFTP Server Remote Code Execution vulnerability
Windows Deployment Services TFTP Server Remote Code Execution vulnerability (CVE-2026-62893) was added to Microsoft’s security update guidance. Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
Windows GDI+ Elevation of Privilege vulnerability
Windows GDI+ Elevation of Privilege vulnerability (CVE-2026-62890) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution vulnerability
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution vulnerability (CVE-2026-62889) was added to Microsoft’s security update guidance. Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
Windows DWM Core Library Elevation of Privilege vulnerability
Windows DWM Core Library Elevation of Privilege vulnerability (CVE-2026-62888) was added to Microsoft’s security update guidance. Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Information Disclosure vulnerability
Windows NTFS Information Disclosure vulnerability (CVE-2026-62887) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows Win32k Elevation of Privilege vulnerability
Windows Win32k Elevation of Privilege vulnerability (CVE-2026-62885) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows DNS Elevation of Privilege vulnerability
Windows DNS Elevation of Privilege vulnerability (CVE-2026-62883) was added to Microsoft’s security update guidance. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Outlook Spoofing vulnerability
Microsoft Outlook Spoofing vulnerability (CVE-2026-62882) was added to Microsoft’s security update guidance. Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. If you need help checking exposure, call (864) 335-9223.
Windows DNS Elevation of Privilege vulnerability
Windows DNS Elevation of Privilege vulnerability (CVE-2026-62881) was added to Microsoft’s security update guidance. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Elevation of Privilege vulnerability
Windows NTFS Elevation of Privilege vulnerability (CVE-2026-62880) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows DNS Server Remote Code Execution vulnerability
Windows DNS Server Remote Code Execution vulnerability (CVE-2026-62878) was added to Microsoft’s security update guidance. Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
Windows Win32k Elevation of Privilege vulnerability
Windows Win32k Elevation of Privilege vulnerability (CVE-2026-62877) was added to Microsoft’s security update guidance. Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Win32k Elevation of Privilege vulnerability
Windows Win32k Elevation of Privilege vulnerability (CVE-2026-62876) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Office Graphics Component Information Disclosure vulnerability
Microsoft Office Graphics Component Information Disclosure vulnerability (CVE-2026-62842) was added to Microsoft’s security update guidance. Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Microsoft SharePoint Server Spoofing vulnerability
Microsoft SharePoint Server Spoofing vulnerability (CVE-2026-62839) was added to Microsoft’s security update guidance. Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. If you need help checking exposure, call (864) 335-9223.