Security Briefs
Page 79 of 141.
Alerts tracked
3939
Security flaws we track for Upstate SC businesses.
Known exploited
545
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
2
Fresh additions to that CISA list since the first of the month.Feeds last synced Oct 7, 2026, 6:01 AM UTC.
Showing page 79 (24 alerts) of 3384.
Microsoft Office Information Disclosure vulnerability
Microsoft Office Information Disclosure vulnerability (CVE-2026-56193) was added to Microsoft’s security update guidance. Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Office Information Disclosure vulnerability
Microsoft Office Information Disclosure vulnerability (CVE-2026-56192) was added to Microsoft’s security update guidance. Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Media Foundation Remote Code Execution vulnerability
Microsoft Windows Media Foundation Remote Code Execution vulnerability (CVE-2026-56189) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows MIDI Service Module Elevation of Privileges vulnerability
Windows MIDI Service Module Elevation of Privileges vulnerability (CVE-2026-56187) was added to Microsoft’s security update guidance. Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Secure Channel Information Disclosure vulnerability
Windows Secure Channel Information Disclosure vulnerability (CVE-2026-56186) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network. If you need help checking exposure, call (864) 335-9223.
Windows Admin Center Information Disclosure vulnerability
Windows Admin Center Information Disclosure vulnerability (CVE-2026-56185) was added to Microsoft’s security update guidance. Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network. If you need help checking exposure, call (864) 335-9223.
Windows MIDI Service Module Elevation of Privileges vulnerability
Windows MIDI Service Module Elevation of Privileges vulnerability (CVE-2026-56183) was added to Microsoft’s security update guidance. Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Network Address Translation (NAT) Spoofing vulnerability
Windows Network Address Translation (NAT) Spoofing vulnerability (CVE-2026-56181) was added to Microsoft’s security update guidance. Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. If you need help checking exposure, call (864) 335-9223.
Microsoft Defender for Endpoint for Mac Elevation of Privilege vulnerability
Microsoft Defender for Endpoint for Mac Elevation of Privilege vulnerability (CVE-2026-56178) was added to Microsoft’s security update guidance. Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Elevation of Privilege vulnerability
Windows NTFS Elevation of Privilege vulnerability (CVE-2026-56175) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows WebView Elevation of Privilege vulnerability
Windows WebView Elevation of Privilege vulnerability (CVE-2026-56173) was added to Microsoft’s security update guidance. Use after free in Windows WebView allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Admin Center Elevation of Privilege vulnerability
Windows Admin Center Elevation of Privilege vulnerability (CVE-2026-56169) was added to Microsoft’s security update guidance. Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Windows SMB Server Denial of Service vulnerability
Windows SMB Server Denial of Service vulnerability (CVE-2026-56168) was added to Microsoft’s security update guidance. Information published. If you need help checking exposure, call (864) 335-9223.
Microsoft SharePoint Server Elevation of Privilege vulnerability
Microsoft SharePoint Server Elevation of Privilege vulnerability (CVE-2026-56164) was added to Microsoft’s security update guidance. Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft SharePoint Server Spoofing vulnerability
Microsoft SharePoint Server Spoofing vulnerability (CVE-2026-56157) was added to Microsoft’s security update guidance. Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft Excel Remote Code Execution vulnerability
Microsoft Excel Remote Code Execution vulnerability (CVE-2026-56156) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Excel Remote Code Execution vulnerability
Microsoft Excel Remote Code Execution vulnerability (CVE-2026-55949) was added to Microsoft’s security update guidance. Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Excel Remote Code Execution vulnerability
Microsoft Excel Remote Code Execution vulnerability (CVE-2026-55948) was added to Microsoft’s security update guidance. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Excel Remote Code Execution vulnerability
Microsoft Excel Remote Code Execution vulnerability (CVE-2026-55947) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution vulnerability
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution vulnerability (CVE-2026-55944) was added to Microsoft’s security update guidance. Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft Excel Remote Code Execution vulnerability
Microsoft Excel Remote Code Execution vulnerability (CVE-2026-55899) was added to Microsoft’s security update guidance. Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Excel Information Disclosure vulnerability
Microsoft Excel Information Disclosure vulnerability (CVE-2026-55898) was added to Microsoft’s security update guidance. Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Outlook Copilot Tampering vulnerability
Outlook Copilot Tampering vulnerability (CVE-2026-55145) was added to Microsoft’s security update guidance. Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network. If you need help checking exposure, call (864) 335-9223.
Windows Cryptography API: Next Generation (CNG) Tampering vulnerability
Windows Cryptography API: Next Generation (CNG) Tampering vulnerability (CVE-2026-55144) was added to Microsoft’s security update guidance. Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally. If you need help checking exposure, call (864) 335-9223.