Security Briefs
Page 91 of 142.
Alerts tracked
3940
Security flaws we track for Upstate SC businesses.
Known exploited
545
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
2
Fresh additions to that CISA list since the first of the month.Feeds last synced Oct 8, 2026, 6:01 AM UTC.
Showing page 91 (24 alerts) of 3385.
Windows Kernel Information Disclosure vulnerability
Windows Kernel Information Disclosure vulnerability (CVE-2026-50294) was added to Microsoft’s security update guidance. Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows Internal Task Bar Elevation of Privilege vulnerability
Windows Internal Task Bar Elevation of Privilege vulnerability (CVE-2026-50293) was added to Microsoft’s security update guidance. Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Kernel Elevation of Privilege vulnerability
Windows Kernel Elevation of Privilege vulnerability (CVE-2026-49808) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows DirectX Information Disclosure vulnerability
Windows DirectX Information Disclosure vulnerability (CVE-2026-49807) was added to Microsoft’s security update guidance. Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows USB Print Driver Elevation of Privilege vulnerability
Windows USB Print Driver Elevation of Privilege vulnerability (CVE-2026-49806) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows USB Video Driver Elevation of Privilege vulnerability
Windows USB Video Driver Elevation of Privilege vulnerability (CVE-2026-49804) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack. If you need help checking exposure, call (864) 335-9223.
Windows AppX Deployment Extensions Elevation of Privilege vulnerability
Windows AppX Deployment Extensions Elevation of Privilege vulnerability (CVE-2026-49803) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows USB Print Driver Elevation of Privilege vulnerability
Windows USB Print Driver Elevation of Privilege vulnerability (CVE-2026-49802) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows SMB Information Disclosure vulnerability
Windows SMB Information Disclosure vulnerability (CVE-2026-49801) was added to Microsoft’s security update guidance. Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability (CVE-2026-49799) was added to Microsoft’s security update guidance. Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Remote Code Execution vulnerability
Windows NTFS Remote Code Execution vulnerability (CVE-2026-49797) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows GDI+ Remote Code Execution vulnerability
Windows GDI+ Remote Code Execution vulnerability (CVE-2026-49796) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows Kernel Elevation of Privilege vulnerability
Windows Kernel Elevation of Privilege vulnerability (CVE-2026-49795) was added to Microsoft’s security update guidance. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows USB Audio Class Driver Information Disclosure vulnerability
Windows USB Audio Class Driver Information Disclosure vulnerability (CVE-2026-49794) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. If you need help checking exposure, call (864) 335-9223.
Windows Resilient File System (ReFS) Remote Code Execution vulnerability
Windows Resilient File System (ReFS) Remote Code Execution vulnerability (CVE-2026-49793) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows Resilient File System (ReFS) Remote Code Execution vulnerability
Windows Resilient File System (ReFS) Remote Code Execution vulnerability (CVE-2026-49792) was added to Microsoft’s security update guidance. Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege vulnerability
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege vulnerability (CVE-2026-49791) was added to Microsoft’s security update guidance. Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege vulnerability
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege vulnerability (CVE-2026-49790) was added to Microsoft’s security update guidance. Information published. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Elevation of Privilege vulnerability
Windows NTFS Elevation of Privilege vulnerability (CVE-2026-49789) was added to Microsoft’s security update guidance. Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows App Store Elevation of Privilege vulnerability
Microsoft Windows App Store Elevation of Privilege vulnerability (CVE-2026-49784) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Remote Code Execution vulnerability
Windows NTFS Remote Code Execution vulnerability (CVE-2026-49184) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows DHCP Client Elevation of Privilege vulnerability
Windows DHCP Client Elevation of Privilege vulnerability (CVE-2026-49181) was added to Microsoft’s security update guidance. Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Windows Active Directory Domain Services Remote Code Execution vulnerability
Windows Active Directory Domain Services Remote Code Execution vulnerability (CVE-2026-49178) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
Windows WalletService Elevation of Privilege vulnerability
Windows WalletService Elevation of Privilege vulnerability (CVE-2026-49176) was added to Microsoft’s security update guidance. Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.