Security Briefs
Page 19 of 165.
Alerts tracked
3939
Security flaws we track for Upstate SC businesses.
Known exploited
545
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
2
Fresh additions to that CISA list since the first of the month.Feeds last synced Oct 5, 2026, 6:01 AM UTC.
Showing page 19 (24 alerts) of 3939.
Microsoft WebP Image Extension Remote Code Execution vulnerability
Microsoft WebP Image Extension Remote Code Execution vulnerability (CVE-2026-70351) was added to Microsoft’s security update guidance. Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
Windows Ancillary Function Driver for WinSock Elevation of Privilege vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege vulnerability (CVE-2026-70342) was added to Microsoft’s security update guidance. <p>Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Visual Studio Code Security Feature Bypass vulnerability
Visual Studio Code Security Feature Bypass vulnerability (CVE-2026-70334) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Imaging Component Remote Code Execution vulnerability
Windows Imaging Component Remote Code Execution vulnerability (CVE-2026-70296) was added to Microsoft’s security update guidance. <p>Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Win32k Elevation of Privilege vulnerability
Windows Win32k Elevation of Privilege vulnerability (CVE-2026-70289) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Win32k Elevation of Privilege vulnerability
Windows Win32k Elevation of Privilege vulnerability (CVE-2026-70283) was added to Microsoft’s security update guidance. <p>Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Media Player Remote Code Execution vulnerability
Windows Media Player Remote Code Execution vulnerability (CVE-2026-70203) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Fabric Elevation of Privilege vulnerability
Microsoft Fabric Elevation of Privilege vulnerability (CVE-2026-70178) was added to Microsoft’s security update guidance. <p>Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Search Component Information Disclosure vulnerability
Microsoft Windows Search Component Information Disclosure vulnerability (CVE-2026-70145) was added to Microsoft’s security update guidance. <p>Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows DHCP Server Information Disclosure vulnerability
Windows DHCP Server Information Disclosure vulnerability (CVE-2026-70124) was added to Microsoft’s security update guidance. <p>Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows DNS Denial of Service vulnerability
Windows DNS Denial of Service vulnerability (CVE-2026-70091) was added to Microsoft’s security update guidance. <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows DHCP Server Denial of Service vulnerability
Windows DHCP Server Denial of Service vulnerability (CVE-2026-70065) was added to Microsoft’s security update guidance. <p>Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Compressed Folder Information Disclosure vulnerability
Windows Compressed Folder Information Disclosure vulnerability (CVE-2026-70019) was added to Microsoft’s security update guidance. <p>Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows DNS Server Remote Code Execution vulnerability
Windows DNS Server Remote Code Execution vulnerability (CVE-2026-69989) was added to Microsoft’s security update guidance. <p>Use after free in DNS Server allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows DHCP Server Information Disclosure vulnerability
Windows DHCP Server Information Disclosure vulnerability (CVE-2026-69930) was added to Microsoft’s security update guidance. <p>Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows DHCP Server Information Disclosure vulnerability
Windows DHCP Server Information Disclosure vulnerability (CVE-2026-69929) was added to Microsoft’s security update guidance. <p>Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Print Spooler Components Elevation of Privilege vulnerability
Windows Print Spooler Components Elevation of Privilege vulnerability (CVE-2026-69921) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Search Component Elevation of Privilege vulnerability
Microsoft Windows Search Component Elevation of Privilege vulnerability (CVE-2026-69911) was added to Microsoft’s security update guidance. <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Hyper-V Remote Code Execution vulnerability
Windows Hyper-V Remote Code Execution vulnerability (CVE-2026-69910) was added to Microsoft’s security update guidance. <p>Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Enterprise App Management Elevation of Privilege vulnerability
Windows Enterprise App Management Elevation of Privilege vulnerability (CVE-2026-69907) was added to Microsoft’s security update guidance. <p>Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Secure Kernel Mode Elevation of Privilege vulnerability
Windows Secure Kernel Mode Elevation of Privilege vulnerability (CVE-2026-69906) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office SharePoint Information Disclosure vulnerability
Microsoft Office SharePoint Information Disclosure vulnerability (CVE-2026-69904) was added to Microsoft’s security update guidance. <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Error Reporting Elevation of Privilege vulnerability
Windows Error Reporting Elevation of Privilege vulnerability (CVE-2026-69896) was added to Microsoft’s security update guidance. <p>Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Spaceport.sys Information Disclosure vulnerability
Windows Spaceport.sys Information Disclosure vulnerability (CVE-2026-69895) was added to Microsoft’s security update guidance. <p>Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.</p> If you need help checking exposure, call (864) 335-9223.