Security Briefs
Page 56 of 141.
Alerts tracked
3939
Security flaws we track for Upstate SC businesses.
Known exploited
545
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
2
Fresh additions to that CISA list since the first of the month.Feeds last synced Oct 7, 2026, 6:01 AM UTC.
Showing page 56 (24 alerts) of 3384.
Microsoft SQL Server Remote Code Execution vulnerability
Microsoft SQL Server Remote Code Execution vulnerability (CVE-2026-54117) was added to Microsoft’s security update guidance. The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft PowerBI Report Server Spoofing vulnerability
Microsoft PowerBI Report Server Spoofing vulnerability (CVE-2026-58647) was added to Microsoft’s security update guidance. Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows Print Spooler Information Disclosure vulnerability
Windows Print Spooler Information Disclosure vulnerability (CVE-2026-50383) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Kernel Elevation of Privilege vulnerability
Windows Kernel Elevation of Privilege vulnerability (CVE-2026-49798) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Telephony Service Elevation of Privilege vulnerability
Windows Telephony Service Elevation of Privilege vulnerability (CVE-2026-42912) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Microsoft Power BI Information Disclosure vulnerability
Microsoft Power BI Information Disclosure vulnerability (CVE-2021-26859) was added to Microsoft’s security update guidance. Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Power BI Report Server Spoofing vulnerability
Microsoft Power BI Report Server Spoofing vulnerability (CVE-2020-1173) was added to Microsoft’s security update guidance. Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Fabric Data Warehouse Remote Code Execution vulnerability
Microsoft Fabric Data Warehouse Remote Code Execution vulnerability (CVE-2026-56642) was added to Microsoft’s security update guidance. Updated the Security Updates table by removing an affected software entry. No user action is required. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows Kernel Information Disclosure vulnerability
Windows Kernel Information Disclosure vulnerability (CVE-2026-50419) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Azure Connected Machine Agent Elevation of Privilege vulnerability
Azure Connected Machine Agent Elevation of Privilege vulnerability (CVE-2026-47632) was added to Microsoft’s security update guidance. Corrected the affected product from **Azure Monitor Agent Metrics Extension** to **Azure Connected Machine Agent** and updated the Security Updates table. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Copilot Information Disclosure vulnerability
Microsoft Copilot Information Disclosure vulnerability (CVE-2026-24301) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Server Network driver Remote Code Execution vulnerability
Windows Server Network driver Remote Code Execution vulnerability (CVE-2026-56188) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Teams for Android Spoofing vulnerability
Microsoft Teams for Android Spoofing vulnerability (CVE-2026-65767) was added to Microsoft’s security update guidance. Corrected build number for the security update. This in an informational change only. If you need help checking exposure, call (864) 335-9223.
Azure Storage Explorer Elevation of Privilege vulnerability
Azure Storage Explorer Elevation of Privilege vulnerability (CVE-2026-57104) was added to Microsoft’s security update guidance. Corrected build number for the security update. This in an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-72970) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Defender Elevation of Privilege vulnerability
Microsoft Defender Elevation of Privilege vulnerability (CVE-2026-69414) was added to Microsoft’s security update guidance. Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-69414. Please see the FAQ for more information on how to check if the new version has been installed. If you need help checking exposure, call (864) 335-9223.
Microsoft PowerShell Remote Code Execution vulnerability
Microsoft PowerShell Remote Code Execution vulnerability (CVE-2026-50523) was added to Microsoft’s security update guidance. The security updates for Powershell have been updated. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Remote Code Execution vulnerability
Windows NTFS Remote Code Execution vulnerability (CVE-2026-50313) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Microsoft Brokering File System Elevation of Privilege vulnerability
Microsoft Brokering File System Elevation of Privilege vulnerability (CVE-2026-49162) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows DWM Core Library Information Disclosure vulnerability
Windows DWM Core Library Information Disclosure vulnerability (CVE-2026-48566) was added to Microsoft’s security update guidance. This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure. The CVE's Impact has been updated. If you need help checking exposure, call (864) 335-9223.
Windows Speech Runtime Elevation of Privilege vulnerability
Windows Speech Runtime Elevation of Privilege vulnerability (CVE-2026-32153) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Use after free in Blink in Microsoft Edge vulnerability
Use after free in Blink in Microsoft Edge vulnerability (CVE-2026-19560) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.
Use after free in HTML in Microsoft Edge vulnerability
Use after free in HTML in Microsoft Edge vulnerability (CVE-2026-19559) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.
Use after free in Extensions in Microsoft Edge vulnerability
Use after free in Extensions in Microsoft Edge vulnerability (CVE-2026-19558) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.