Security Briefs
Page 2 of 141.
Alerts tracked
3939
Security flaws we track for Upstate SC businesses.
Known exploited
545
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
2
Fresh additions to that CISA list since the first of the month.Feeds last synced Oct 5, 2026, 6:01 AM UTC.
Showing page 2 (24 alerts) of 3384.
Azure Database for PostgreSQL Elevation of Privilege vulnerability
Azure Database for PostgreSQL Elevation of Privilege vulnerability (CVE-2026-85878) was added to Microsoft’s security update guidance. <p>Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Azure Portal Spoofing vulnerability
Azure Portal Spoofing vulnerability (CVE-2026-83946) was added to Microsoft’s security update guidance. <p>Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.</p> If you need help checking exposure, call (864) 335-9223.
Azure Logic Apps Elevation of Privilege vulnerability
Azure Logic Apps Elevation of Privilege vulnerability (CVE-2026-83944) was added to Microsoft’s security update guidance. <p>Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft 365 Copilot Business Chat Information Disclosure vulnerability
Microsoft 365 Copilot Business Chat Information Disclosure vulnerability (CVE-2026-78501) was added to Microsoft’s security update guidance. <p>Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Dataverse Elevation of Privilege vulnerability
Microsoft Dataverse Elevation of Privilege vulnerability (CVE-2026-77903) was added to Microsoft’s security update guidance. <p>Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Azure Logic Apps Elevation of Privilege vulnerability
Azure Logic Apps Elevation of Privilege vulnerability (CVE-2026-70200) was added to Microsoft’s security update guidance. <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Azure Arc Elevation of Privilege vulnerability
Azure Arc Elevation of Privilege vulnerability (CVE-2026-70009) was added to Microsoft’s security update guidance. <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Container Registry Elevation of Privilege vulnerability
Microsoft Container Registry Elevation of Privilege vulnerability (CVE-2026-69865) was added to Microsoft’s security update guidance. <p>Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Fabric Elevation of Privilege vulnerability
Microsoft Fabric Elevation of Privilege vulnerability (CVE-2026-69843) was added to Microsoft’s security update guidance. <p>Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Azure Arc Elevation of Privilege vulnerability
Azure Arc Elevation of Privilege vulnerability (CVE-2026-69399) was added to Microsoft’s security update guidance. Information published. If you need help checking exposure, call (864) 335-9223.
Azure Machine Learning Information Disclosure vulnerability
Azure Machine Learning Information Disclosure vulnerability (CVE-2026-68791) was added to Microsoft’s security update guidance. <p>Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Azure Billing Elevation of Privilege vulnerability
Azure Billing Elevation of Privilege vulnerability (CVE-2026-62874) was added to Microsoft’s security update guidance. <p>Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Win32k Elevation of Privilege vulnerability
Windows Win32k Elevation of Privilege vulnerability (CVE-2026-56176) was added to Microsoft’s security update guidance. Added Office software to the Security Updates table. Customers that are running supported version of Office are encouraged to update to the indicated version to be protected from this vulnerability. If you need help checking exposure, call (864) 335-9223.
Microsoft Copilot Information Disclosure vulnerability
Microsoft Copilot Information Disclosure vulnerability (CVE-2026-55946) was added to Microsoft’s security update guidance. <p>Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office Information Disclosure vulnerability
Microsoft Office Information Disclosure vulnerability (CVE-2026-55121) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows Server Elevation of Privilege vulnerability
Windows Server Elevation of Privilege vulnerability (CVE-2026-50311) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows Cloud Files Mini Filter Driver Elevation of Privilege vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege vulnerability (CVE-2026-33835) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Chromium CVE-2026-87559: UI misrepresentation in Microsoft Edge vulnerability
Chromium CVE-2026-87559: UI misrepresentation in Microsoft Edge vulnerability (CVE-2026-87559) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability (CVE-2026-85893) was added to Microsoft’s security update guidance. <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-69486) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Planetary Computer Pro Elevation of Privilege vulnerability
Microsoft Planetary Computer Pro Elevation of Privilege vulnerability (CVE-2026-63508) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Excel Remote Code Execution vulnerability
Microsoft Excel Remote Code Execution vulnerability (CVE-2026-55053) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows Win32k Elevation of Privilege vulnerability
Windows Win32k Elevation of Privilege vulnerability (CVE-2026-50688) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows DHCP Client Elevation of Privilege vulnerability
Windows DHCP Client Elevation of Privilege vulnerability (CVE-2026-50683) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.