Security Briefs
Page 75 of 90.
Alerts tracked
2651
Security flaws we track for Upstate SC businesses.
Known exploited
504
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
60
Fresh additions to that CISA list since the first of the month.Feeds last synced Aug 23, 2026, 6:00 AM UTC.
Showing page 75 (24 alerts) of 2139.
Windows Ancillary Function Driver for WinSock Elevation of Privilege vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege vulnerability (CVE-2026-42911) was added to Microsoft’s security update guidance. Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Remote Desktop Protocol (RDP) Information Disclosure vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure vulnerability (CVE-2026-42908) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. If you need help checking exposure, call (864) 335-9223.
Windows Shell Information Disclosure vulnerability
Windows Shell Information Disclosure vulnerability (CVE-2026-42907) was added to Microsoft’s security update guidance. Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows Shell Information Disclosure vulnerability
Windows Shell Information Disclosure vulnerability (CVE-2026-42906) was added to Microsoft’s security update guidance. Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows DWM Core Library Elevation of Privilege vulnerability
Windows DWM Core Library Elevation of Privilege vulnerability (CVE-2026-42905) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows TCP/IP Elevation of Privilege vulnerability
Windows TCP/IP Elevation of Privilege vulnerability (CVE-2026-42904) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network. If you need help checking exposure, call (864) 335-9223.
Microsoft PowerToys Elevation of Privilege vulnerability
Microsoft PowerToys Elevation of Privilege vulnerability (CVE-2026-42902) was added to Microsoft’s security update guidance. Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Projected File System Elevation of Privilege vulnerability
Windows Projected File System Elevation of Privilege vulnerability (CVE-2026-42837) was added to Microsoft’s security update guidance. Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege vulnerability
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege vulnerability (CVE-2026-42836) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Teams for Android Information Disclosure vulnerability
Microsoft Teams for Android Information Disclosure vulnerability (CVE-2026-42835) was added to Microsoft’s security update guidance. Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. If you need help checking exposure, call (864) 335-9223.
Windows Administrator Protection Secure Feature Bypass vulnerability
Windows Administrator Protection Secure Feature Bypass vulnerability (CVE-2026-42829) was added to Microsoft’s security update guidance. Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally. If you need help checking exposure, call (864) 335-9223.
Windows DNS Client Elevation of Privilege vulnerability
Windows DNS Client Elevation of Privilege vulnerability (CVE-2026-41108) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Microsoft 365 Copilot for Android Spoofing vulnerability
Microsoft 365 Copilot for Android Spoofing vulnerability (CVE-2026-41100) was added to Microsoft’s security update guidance. Added Microsoft Excel for Android, Microsoft Word for Android, Microsoft Loop for Android, Microsoft PowerPoint for Android and Microsoft OneNote for Android softwares to the Security Updates table. Customers that are running supported version of these products are encouraged… If you need help checking exposure, call (864) 335-9223.
Azure Stack Edge Spoofing vulnerability
Azure Stack Edge Spoofing vulnerability (CVE-2026-41098) was added to Microsoft’s security update guidance. Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft Kinect Elevation of Privilege vulnerability
Microsoft Kinect Elevation of Privilege vulnerability (CVE-2026-41092) was added to Microsoft’s security update guidance. Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege vulnerability
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege vulnerability (CVE-2026-40409) was added to Microsoft’s security update guidance. Information published. If you need help checking exposure, call (864) 335-9223.
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege vulnerability
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege vulnerability (CVE-2026-40404) was added to Microsoft’s security update guidance. Information published. If you need help checking exposure, call (864) 335-9223.
Windows Ancillary Function Driver for WinSock Elevation of Privilege vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege vulnerability (CVE-2026-34335) was added to Microsoft’s security update guidance. Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Device Health Attestation (DHA) Elevation of Privilege vulnerability
Windows Device Health Attestation (DHA) Elevation of Privilege vulnerability (CVE-2026-33828) was added to Microsoft’s security update guidance. Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
net vulnerability
net vulnerability (CVE-2026-33811) was added to Microsoft’s security update guidance. Information published. If you need help checking exposure, call (864) 335-9223.
Microsoft SharePoint Server Spoofing vulnerability
Microsoft SharePoint Server Spoofing vulnerability (CVE-2026-33113) was added to Microsoft’s security update guidance. Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. If you need help checking exposure, call (864) 335-9223.
Azure Kubernetes Service (AKS) Remote Code Execution vulnerability
Azure Kubernetes Service (AKS) Remote Code Execution vulnerability (CVE-2026-32193) was added to Microsoft’s security update guidance. Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows Rich Text Edit Elevation of Privilege vulnerability
Windows Rich Text Edit Elevation of Privilege vulnerability (CVE-2026-21530) was added to Microsoft’s security update guidance. Added Office softwares to the Security Updates table. Customers that are running supported versions of Office are encouraged to update to the indicated versions to be protected from this vulnerability. If you need help checking exposure, call (864) 335-9223.
Insufficient validation of untrusted input in Reader Mode in Microsoft Edge vulnerability
Insufficient validation of untrusted input in Reader Mode in Microsoft Edge vulnerability (CVE-2026-11297) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. If you need help checking exposure, call (864) 335-9223.