Published CVE security briefs and CISA KEV alerts tracked by PremierePC.https://premierepc.com/security-briefsen-ushttps://premierepc.com/security-briefs/cve-2026-18556https://premierepc.com/security-briefs/cve-2026-18556N-able N-central is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-18556). N-able N-central contains an authentication bypass using an Tue, 04 Aug 2026 00:00:00 GMTN-ableN-centralCISA KEVhttps://premierepc.com/security-briefs/cve-2026-34486https://premierepc.com/security-briefs/cve-2026-34486Apache Tomcat is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-34486). Apache Tomcat contains a missing encryption of sensitive data vTue, 04 Aug 2026 00:00:00 GMTApacheTomcatCISA KEVhttps://premierepc.com/security-briefs/news-260804https://premierepc.com/security-briefs/news-260804Ongoing Threats of Swatting and Indicators for Community Members — FBI IC3 industry advisory relevant to cyber risk. PremierePC monitors federal alerts forTue, 04 Aug 2026 12:00:00 GMTFBI IC3Industry newshttps://premierepc.com/security-briefs/cve-2026-18577https://premierepc.com/security-briefs/cve-2026-18577N-able N-central is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-18577). N-able N-central contains an authentication bypass using an Mon, 03 Aug 2026 00:00:00 GMTN-ableN-centralCISA KEVhttps://premierepc.com/security-briefs/cve-2026-50341https://premierepc.com/security-briefs/cve-2026-50341Windows NTFS Information Disclosure vulnerability (CVE-2026-50341) was added to Microsoft’s security update guidance. Acknowledgement Updated PremierePC trTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows NTFS Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-24304https://premierepc.com/security-briefs/cve-2026-24304Azure Resource Manager Elevation of Privilege vulnerability (CVE-2026-24304) was added to Microsoft’s security update guidance. Informational Change. CVE IThu, 30 Jul 2026 00:00:00 GMTMicrosoftAzure Resource Manager Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-54128https://premierepc.com/security-briefs/cve-2026-54128Windows DHCP Client Remote Code Execution vulnerability (CVE-2026-54128) was added to Microsoft’s security update guidance. Updated an acknowledgement. ThiTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows DHCP Client Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-55129https://premierepc.com/security-briefs/cve-2026-55129Microsoft Office Remote Code Execution vulnerability (CVE-2026-55129) was added to Microsoft’s security update guidance. Acknowledgement Updated PremierePCTue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Office Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-56197https://premierepc.com/security-briefs/cve-2026-56197Windows Admin Center (WAC) Remote Code Execution vulnerability (CVE-2026-56197) was added to Microsoft’s security update guidance. Updated an acknowledgemeTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Admin Center (WAC) Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-66803https://premierepc.com/security-briefs/cve-2026-66803Azure Cosmos DB Remote Code Execution vulnerability (CVE-2026-66803) was added to Microsoft’s security update guidance. Improper access control in Azure CoThu, 30 Jul 2026 00:00:00 GMTMicrosoftAzure Cosmos DB Remote Code Executionhttps://premierepc.com/security-briefs/news-260730https://premierepc.com/security-briefs/news-260730Malicious Cyber Actors Targeting Water and Wastewater Sector Internet Facing Programmable Logic Controllers, Causing Operational Disruptions — FBI IC3 induThu, 30 Jul 2026 12:00:00 GMTFBI IC3Industry newshttps://premierepc.com/security-briefs/cve-2026-20316https://premierepc.com/security-briefs/cve-2026-20316Cisco Secure Firewall Management Center (FMC) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-20316). Cisco Secure Firewall ManagemenWed, 29 Jul 2026 00:00:00 GMTCiscoSecure Firewall Management Center (FMC)CISA KEVhttps://premierepc.com/security-briefs/cve-2026-50422https://premierepc.com/security-briefs/cve-2026-50422Windows NTFS Elevation of Privilege vulnerability (CVE-2026-50422) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is aTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows NTFS Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-59117https://premierepc.com/security-briefs/cve-2026-59117Windows Terminal Remote Code Execution vulnerability (CVE-2026-59117) was added to Microsoft’s security update guidance. Change the name of the affected soThu, 16 Jul 2026 00:00:00 GMTMicrosoftWindows Terminal Remote Code Executionhttps://premierepc.com/security-briefs/cve-2025-68686https://premierepc.com/security-briefs/cve-2025-68686Fortinet FortiOS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-68686). Fortinet FortiOS contains an exposure of sensitive informatiMon, 27 Jul 2026 00:00:00 GMTFortinetFortiOSCISA KEVhttps://premierepc.com/security-briefs/cve-2026-50333https://premierepc.com/security-briefs/cve-2026-50333Windows Spaceport.sys Elevation of Privilege vulnerability (CVE-2026-50333) was added to Microsoft’s security update guidance. Updated an acknowledgement. Tue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Spaceport.sys Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-50343https://premierepc.com/security-briefs/cve-2026-50343Microsoft Install Service Elevation of Privilege vulnerability (CVE-2026-50343) was added to Microsoft’s security update guidance. Updated an acknowledgemeTue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Install Service Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-50697https://premierepc.com/security-briefs/cve-2026-50697Windows Common Log File System Driver Elevation of Privilege vulnerability (CVE-2026-50697) was added to Microsoft’s security update guidance. Updated an aTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Common Log File System Driver Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-48561https://premierepc.com/security-briefs/cve-2026-48561Microsoft Edge Copilot Remote Code Execution vulnerability (CVE-2026-48561) was added to Microsoft’s security update guidance. Corrected the CVE descriptioTue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Edge Copilot Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-62835https://premierepc.com/security-briefs/cve-2026-62835Azure Portal Information Disclosure vulnerability (CVE-2026-62835) was added to Microsoft’s security update guidance. Corrected the CVE description and titFri, 24 Jul 2026 00:00:00 GMTMicrosoftAzure Portal Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-35425https://premierepc.com/security-briefs/cve-2026-35425Azure API Management (APIM) Remote Code Execution vulnerability (CVE-2026-35425) was added to Microsoft’s security update guidance. Improper access controlThu, 23 Jul 2026 00:00:00 GMTMicrosoftAzure API Management (APIM) Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-49159https://premierepc.com/security-briefs/cve-2026-49159Microsoft Graph Information Disclosure vulnerability (CVE-2026-49159) was added to Microsoft’s security update guidance. Exposure of sensitive information Thu, 23 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Graph Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-50046https://premierepc.com/security-briefs/cve-2026-50046an error path when a DoT forwarded query is jostled out vulnerability (CVE-2026-50046) was added to Microsoft’s security update guidance. Information publiThu, 23 Jul 2026 00:00:00 GMTanan error path when a DoT forwarded query is jostled outhttps://premierepc.com/security-briefs/cve-2026-50517https://premierepc.com/security-briefs/cve-2026-50517Microsoft M365 Copilot Remote Code Execution vulnerability (CVE-2026-50517) was added to Microsoft’s security update guidance. Deserialization of untrustedThu, 23 Jul 2026 00:00:00 GMTMicrosoftMicrosoft M365 Copilot Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-54120https://premierepc.com/security-briefs/cve-2026-54120Microsoft Surface Remote Code Execution vulnerability (CVE-2026-54120) was added to Microsoft’s security update guidance. Improper input validation in MicrThu, 23 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Surface Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-56160https://premierepc.com/security-briefs/cve-2026-56160Azure Red Hat OpenShift (ARO) Elevation of Privilege vulnerability (CVE-2026-56160) was added to Microsoft’s security update guidance. Improper authorizatiThu, 23 Jul 2026 00:00:00 GMTMicrosoftAzure Red Hat OpenShift (ARO) Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-56163https://premierepc.com/security-briefs/cve-2026-56163Microsoft Azure Kubernetes Service Elevation of Privilege vulnerability (CVE-2026-56163) was added to Microsoft’s security update guidance. Missing authentThu, 23 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Azure Kubernetes Service Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-56165https://premierepc.com/security-briefs/cve-2026-56165Microsoft Account Remote Code Execution vulnerability (CVE-2026-56165) was added to Microsoft’s security update guidance. Heap-based buffer overflow in MicThu, 23 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Account Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-56167https://premierepc.com/security-briefs/cve-2026-56167Azure AI Search Elevation of Privilege vulnerability (CVE-2026-56167) was added to Microsoft’s security update guidance. Server-side request forgery (ssrf)Thu, 23 Jul 2026 00:00:00 GMTMicrosoftAzure AI Search Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-56191https://premierepc.com/security-briefs/cve-2026-56191Microsoft Exchange Online Tampering vulnerability (CVE-2026-56191) was added to Microsoft’s security update guidance. Improper authentication in Microsoft Thu, 23 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Exchange Online Tamperinghttps://premierepc.com/security-briefs/cve-2026-58275https://premierepc.com/security-briefs/cve-2026-58275Azure DNS Elevation of Privilege vulnerability (CVE-2026-58275) was added to Microsoft’s security update guidance. Missing authorization in Azure DNS allowThu, 23 Jul 2026 00:00:00 GMTMicrosoftAzure DNS Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-58630https://premierepc.com/security-briefs/cve-2026-58630Azure App Service on Azure Stack Hub Elevation of Privilege vulnerability (CVE-2026-58630) was added to Microsoft’s security update guidance. Improper acceThu, 23 Jul 2026 00:00:00 GMTMicrosoftAzure App Service on Azure Stack Hub Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-62825https://premierepc.com/security-briefs/cve-2026-62825Azure Key Vault Elevation of Privilege vulnerability (CVE-2026-62825) was added to Microsoft’s security update guidance. Improper authentication in Azure KThu, 23 Jul 2026 00:00:00 GMTMicrosoftAzure Key Vault Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-50377https://premierepc.com/security-briefs/cve-2026-50377Windows Kernel Elevation of Privilege vulnerability (CVE-2026-50377) was added to Microsoft’s security update guidance. Updated an acknowledgement. This isTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Kernel Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-50407https://premierepc.com/security-briefs/cve-2026-50407Windows Resilient File System (ReFS) Elevation of Privilege vulnerability (CVE-2026-50407) was added to Microsoft’s security update guidance. Updated an acTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Resilient File System (ReFS) Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-50441https://premierepc.com/security-briefs/cve-2026-50441Windows Resilient File System (ReFS) Elevation of Privilege vulnerability (CVE-2026-50441) was added to Microsoft’s security update guidance. Updated an acTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Resilient File System (ReFS) Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-50458https://premierepc.com/security-briefs/cve-2026-50458Microsoft Brokering File System Elevation of Privilege vulnerability (CVE-2026-50458) was added to Microsoft’s security update guidance. Updated an acknowlTue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Brokering File System Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-50466https://premierepc.com/security-briefs/cve-2026-50466Microsoft Brokering File System Elevation of Privilege vulnerability (CVE-2026-50466) was added to Microsoft’s security update guidance. Updated an acknowlTue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Brokering File System Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-50522https://premierepc.com/security-briefs/cve-2026-50522Microsoft SharePoint is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-50522). Microsoft SharePoint contains a deserialization of untruWed, 22 Jul 2026 00:00:00 GMTMicrosoftSharePointCISA KEVhttps://premierepc.com/security-briefs/cve-2026-64188https://premierepc.com/security-briefs/cve-2026-64188rmnet_dellink() vulnerability (CVE-2026-64188) was added to Microsoft’s security update guidance. Information published. PremierePC tracks MSRC advisories Wed, 22 Jul 2026 00:00:00 GMTrmnet_dellinkrmnet_dellink()https://premierepc.com/security-briefs/cve-2026-64190https://premierepc.com/security-briefs/cve-2026-64190net net: team: fix NULL pointer dereference in team_xmit during mode change (CVE-2026-64190) was added to Microsoft’s security update guidance. InformationWed, 22 Jul 2026 00:00:00 GMTnetnet: team: fix NULL pointer dereference in team_xmit during mode changehttps://premierepc.com/security-briefs/cve-2021-27137https://premierepc.com/security-briefs/cve-2021-27137DD-WRT DD-WRT is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27137). DD-WRT contains a stack-based buffer overflow vulnerability thaTue, 21 Jul 2026 00:00:00 GMTDD-WRTDD-WRTCISA KEVhttps://premierepc.com/security-briefs/cve-2026-0770https://premierepc.com/security-briefs/cve-2026-0770Langflow Langflow is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-0770). Langflow contains an inclusion of functionality from untrustTue, 21 Jul 2026 00:00:00 GMTLangflowLangflowCISA KEVhttps://premierepc.com/security-briefs/cve-2026-38752https://premierepc.com/security-briefs/cve-2026-38752A A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a Tue, 21 Jul 2026 00:00:00 GMTAA stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.https://premierepc.com/security-briefs/cve-2026-38753https://premierepc.com/security-briefs/cve-2026-38753A A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a craftedTue, 21 Jul 2026 00:00:00 GMTAA use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.https://premierepc.com/security-briefs/cve-2026-38754https://premierepc.com/security-briefs/cve-2026-38754A A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a craftedTue, 21 Jul 2026 00:00:00 GMTAA heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.https://premierepc.com/security-briefs/cve-2026-38755https://premierepc.com/security-briefs/cve-2026-38755A A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafteTue, 21 Jul 2026 00:00:00 GMTAA heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.https://premierepc.com/security-briefs/cve-2026-50462https://premierepc.com/security-briefs/cve-2026-50462Windows Ancillary Function Driver for WinSock Elevation of Privilege vulnerability (CVE-2026-50462) was added to Microsoft’s security update guidance. UpdaTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Ancillary Function Driver for WinSock Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-58640https://premierepc.com/security-briefs/cve-2026-58640Windows NTFS Remote Code Execution vulnerability (CVE-2026-58640) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is anTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows NTFS Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-60137https://premierepc.com/security-briefs/cve-2026-60137WordPress Core is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-60137). WordPress Core contains a SQL injection vulnerability when a pTue, 21 Jul 2026 00:00:00 GMTWordPressCoreCISA KEVhttps://premierepc.com/security-briefs/cve-2026-63030https://premierepc.com/security-briefs/cve-2026-63030WordPress Core is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-63030). WordPress Core contains an interpretation conflict vulnerabiliTue, 21 Jul 2026 00:00:00 GMTWordPressCoreCISA KEVhttps://premierepc.com/security-briefs/cve-2026-63954https://premierepc.com/security-briefs/cve-2026-63954hpfs: fix a crash if hpfs_map_dnode_bitmap fails vulnerability (CVE-2026-63954) was added to Microsoft’s security update guidance. Information published. PTue, 21 Jul 2026 00:00:00 GMThpfshpfs: fix a crash if hpfs_map_dnode_bitmap failshttps://premierepc.com/security-briefs/cve-2026-63978https://premierepc.com/security-briefs/cve-2026-63978net net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) was added to Microsoft’s security update guidance. Information published. Tue, 21 Jul 2026 00:00:00 GMTnetnet/handshake: Drain pending requests at net namespace exithttps://premierepc.com/security-briefs/cve-2026-63979https://premierepc.com/security-briefs/cve-2026-63979net net/handshake: hand off the pinned file reference to accept_doit (CVE-2026-63979) was added to Microsoft’s security update guidance. Information publisTue, 21 Jul 2026 00:00:00 GMTnetnet/handshake: hand off the pinned file reference to accept_doithttps://premierepc.com/security-briefs/cve-2026-63983https://premierepc.com/security-briefs/cve-2026-63983net net/sched: fix packet loop on netem when duplicate is on (CVE-2026-63983) was added to Microsoft’s security update guidance. Information published. PreTue, 21 Jul 2026 00:00:00 GMTnetnet/sched: fix packet loop on netem when duplicate is onhttps://premierepc.com/security-briefs/cve-2024-35248https://premierepc.com/security-briefs/cve-2024-35248Microsoft Dynamics 365 Business Central Elevation of Privilege vulnerability (CVE-2024-35248) was added to Microsoft’s security update guidance. Updated thMon, 20 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Dynamics 365 Business Central Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-50304https://premierepc.com/security-briefs/cve-2026-50304Windows Active Directory Federation Services Denial of Service vulnerability (CVE-2026-50304) was added to Microsoft’s security update guidance. Updated prTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Active Directory Federation Services Denial of Servicehttps://premierepc.com/security-briefs/cve-2026-50324https://premierepc.com/security-briefs/cve-2026-50324Windows Active Directory Federation Services Denial of Service vulnerability (CVE-2026-50324) was added to Microsoft’s security update guidance. Updated prTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Active Directory Federation Services Denial of Servicehttps://premierepc.com/security-briefs/cve-2026-50355https://premierepc.com/security-briefs/cve-2026-50355Windows Active Directory Federation Services Denial of Service vulnerability (CVE-2026-50355) was added to Microsoft’s security update guidance. Updated prTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Active Directory Federation Services Denial of Servicehttps://premierepc.com/security-briefs/cve-2026-50368https://premierepc.com/security-briefs/cve-2026-50368Windows Active Directory Federation Services Denial of Service vulnerability (CVE-2026-50368) was added to Microsoft’s security update guidance. Updated prTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Active Directory Federation Services Denial of Servicehttps://premierepc.com/security-briefs/cve-2026-50411https://premierepc.com/security-briefs/cve-2026-50411Windows Active Directory Federation Services Denial of Service vulnerability (CVE-2026-50411) was added to Microsoft’s security update guidance. Updated prTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Active Directory Federation Services Denial of Servicehttps://premierepc.com/security-briefs/cve-2026-50652https://premierepc.com/security-briefs/cve-2026-50652Azure Active Directory Denial of Service vulnerability (CVE-2026-50652) was added to Microsoft’s security update guidance. Updated product information in tTue, 14 Jul 2026 00:00:00 GMTMicrosoftAzure Active Directory Denial of Servicehttps://premierepc.com/security-briefs/cve-2026-50653https://premierepc.com/security-briefs/cve-2026-50653Azure Active Directory Denial of Service vulnerability (CVE-2026-50653) was added to Microsoft’s security update guidance. Updated product information in tTue, 14 Jul 2026 00:00:00 GMTMicrosoftAzure Active Directory Denial of Servicehttps://premierepc.com/security-briefs/cve-2026-63829https://premierepc.com/security-briefs/cve-2026-63829net net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829) was added to Microsoft’s security update guidance. Information pMon, 20 Jul 2026 00:00:00 GMTnetnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelinkhttps://premierepc.com/security-briefs/cve-2026-63830https://premierepc.com/security-briefs/cve-2026-63830net net: skmsg: preserve sg.copy across SG transforms (CVE-2026-63830) was added to Microsoft’s security update guidance. Information published. PremierePCMon, 20 Jul 2026 00:00:00 GMTnetnet: skmsg: preserve sg.copy across SG transformshttps://premierepc.com/security-briefs/news-260720https://premierepc.com/security-briefs/news-260720FBI Warns of Scammers Impersonating the IC3 — FBI IC3 industry advisory relevant to cyber risk. PremierePC monitors federal alerts for Upstate SC businesseMon, 20 Jul 2026 12:00:00 GMTFBI IC3Industry newshttps://premierepc.com/security-briefs/cve-2026-25089https://premierepc.com/security-briefs/cve-2026-25089Fortinet FortiSandbox is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-25089). Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSanThu, 16 Jul 2026 00:00:00 GMTFortinetFortiSandboxCISA KEVhttps://premierepc.com/security-briefs/cve-2026-39808https://premierepc.com/security-briefs/cve-2026-39808Fortinet FortiSandbox is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-39808). Fortinet FortiSandbox contains an OS command injection Thu, 16 Jul 2026 00:00:00 GMTFortinetFortiSandboxCISA KEVhttps://premierepc.com/security-briefs/cve-2026-56171https://premierepc.com/security-briefs/cve-2026-56171Windows Remote Desktop Protocol (RDP) Information Disclosure vulnerability (CVE-2026-56171) was added to Microsoft’s security update guidance. Exposure of Thu, 16 Jul 2026 00:00:00 GMTMicrosoftWindows Remote Desktop Protocol (RDP) Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-58598https://premierepc.com/security-briefs/cve-2026-58598Windows Backup Service Elevation of Privilege vulnerability (CVE-2026-58598) was added to Microsoft’s security update guidance. Concurrent execution using Thu, 16 Jul 2026 00:00:00 GMTMicrosoftWindows Backup Service Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-58643https://premierepc.com/security-briefs/cve-2026-58643Windows Admin Center Spoofing vulnerability (CVE-2026-58643) was added to Microsoft’s security update guidance. Improper neutralization of input during webThu, 16 Jul 2026 00:00:00 GMTMicrosoftWindows Admin Center Spoofinghttps://premierepc.com/security-briefs/cve-2023-4346https://premierepc.com/security-briefs/cve-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2023-4346). KNX AssociationWed, 15 Jul 2026 00:00:00 GMTKNX AssociationKNX Protocol Connection Authorization Option 1CISA KEVhttps://premierepc.com/security-briefs/cve-2026-39822https://premierepc.com/security-briefs/cve-2026-39822os vulnerability (CVE-2026-39822) was added to Microsoft’s security update guidance. Information published. PremierePC tracks MSRC advisories for Upstate SWed, 15 Jul 2026 00:00:00 GMTososhttps://premierepc.com/security-briefs/cve-2026-45637https://premierepc.com/security-briefs/cve-2026-45637Microsoft DWM Core Library Elevation of Privilege vulnerability (CVE-2026-45637) was added to Microsoft’s security update guidance. Updated acknowledgment.Tue, 09 Jun 2026 00:00:00 GMTMicrosoftMicrosoft DWM Core Library Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-46817https://premierepc.com/security-briefs/cve-2026-46817Oracle E-Business Suite is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-46817). Oracle E-Business Suite contains an improper privilegWed, 15 Jul 2026 00:00:00 GMTOracleE-Business SuiteCISA KEVhttps://premierepc.com/security-briefs/cve-2026-56182https://premierepc.com/security-briefs/cve-2026-56182Windows NTFS Elevation of Privilege vulnerability (CVE-2026-56182) was added to Microsoft’s security update guidance. Updated acknowledgment. This is an inTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows NTFS Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-58644https://premierepc.com/security-briefs/cve-2026-58644Microsoft SharePoint Remote Code Execution vulnerability (CVE-2026-58644) was added to Microsoft’s security update guidance. Corrected the Exploitability ITue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft SharePoint Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-15409https://premierepc.com/security-briefs/cve-2026-15409SonicWall SMA1000 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-15409). SonicWall SMA1000 Appliances contain a server-siTue, 14 Jul 2026 00:00:00 GMTSonicWallSMA1000 AppliancesCISA KEVhttps://premierepc.com/security-briefs/cve-2026-15410https://premierepc.com/security-briefs/cve-2026-15410SonicWall SMA1000 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-15410). SonicWall SMA1000 Appliances contain a code injeTue, 14 Jul 2026 00:00:00 GMTSonicWallSMA1000 AppliancesCISA KEVhttps://premierepc.com/security-briefs/cve-2026-33842https://premierepc.com/security-briefs/cve-2026-33842Windows File Explorer Information Disclosure vulnerability (CVE-2026-33842) was added to Microsoft’s security update guidance. Exposure of sensitive informTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows File Explorer Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-34328https://premierepc.com/security-briefs/cve-2026-34328Windows Audio Service Information Disclosure vulnerability (CVE-2026-34328) was added to Microsoft’s security update guidance. Exposure of sensitive informTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Audio Service Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-34346https://premierepc.com/security-briefs/cve-2026-34346Windows Ancillary Function Driver for WinSock Information Disclosure vulnerability (CVE-2026-34346) was added to Microsoft’s security update guidance. CleaTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Ancillary Function Driver for WinSock Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-34348https://premierepc.com/security-briefs/cve-2026-34348Windows Event Logging Service Information Disclosure vulnerability (CVE-2026-34348) was added to Microsoft’s security update guidance. Protection mechanismTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Event Logging Service Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-34349https://premierepc.com/security-briefs/cve-2026-34349Windows Media Information Disclosure vulnerability (CVE-2026-34349) was added to Microsoft’s security update guidance. Exposure of sensitive information toTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Media Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-40378https://premierepc.com/security-briefs/cve-2026-40378Windows Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability (CVE-2026-40378) was added to Microsoft’s security update guidanTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Local Security Authority Subsystem Service (LSASS) Denial of Servicehttps://premierepc.com/security-briefs/cve-2026-40400https://premierepc.com/security-briefs/cve-2026-40400Windows PowerShell Remote Code Execution vulnerability (CVE-2026-40400) was added to Microsoft’s security update guidance. Relative path traversal in WindoTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows PowerShell Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-40422https://premierepc.com/security-briefs/cve-2026-40422Windows File Explorer Information Disclosure vulnerability (CVE-2026-40422) was added to Microsoft’s security update guidance. Use of uninitialized resourcTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows File Explorer Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-41087https://premierepc.com/security-briefs/cve-2026-41087Windows File Explorer Information Disclosure vulnerability (CVE-2026-41087) was added to Microsoft’s security update guidance. Exposure of sensitive informTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows File Explorer Information Disclosurehttps://premierepc.com/security-briefs/cve-2026-42897https://premierepc.com/security-briefs/cve-2026-42897Microsoft Exchange Server Spoofing vulnerability (CVE-2026-42897) was added to Microsoft’s security update guidance. Updated FAQ information. This is an inThu, 14 May 2026 00:00:00 GMTMicrosoftMicrosoft Exchange Server Spoofinghttps://premierepc.com/security-briefs/cve-2026-42900https://premierepc.com/security-briefs/cve-2026-42900Microsoft Windows App Store Elevation of Privilege vulnerability (CVE-2026-42900) was added to Microsoft’s security update guidance. Concurrent execution uTue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Windows App Store Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-42975https://premierepc.com/security-briefs/cve-2026-42975Windows Bluetooth Port Driver Remote Code Execution vulnerability (CVE-2026-42975) was added to Microsoft’s security update guidance. Heap-based buffer oveTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Bluetooth Port Driver Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-42982https://premierepc.com/security-briefs/cve-2026-42982Windows Secure Kernel Mode Elevation of Privilege vulnerability (CVE-2026-42982) was added to Microsoft’s security update guidance. Improper validation of Tue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Secure Kernel Mode Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-42990https://premierepc.com/security-briefs/cve-2026-42990SQL Server ODBC driver Elevation of Privilege vulnerability (CVE-2026-42990) was added to Microsoft’s security update guidance. Heap-based buffer overflow Tue, 14 Jul 2026 00:00:00 GMTMicrosoftSQL Server ODBC driver Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-44800https://premierepc.com/security-briefs/cve-2026-44800Windows Push Notifications Elevation of Privilege vulnerability (CVE-2026-44800) was added to Microsoft’s security update guidance. Concurrent execution usTue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Push Notifications Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-44806https://premierepc.com/security-briefs/cve-2026-44806Windows Secure Channel Denial of Service vulnerability (CVE-2026-44806) was added to Microsoft’s security update guidance. Missing release of memory after Tue, 14 Jul 2026 00:00:00 GMTMicrosoftWindows Secure Channel Denial of Servicehttps://premierepc.com/security-briefs/cve-2026-45496https://premierepc.com/security-briefs/cve-2026-45496Visual Studio Code Security Feature Bypass vulnerability (CVE-2026-45496) was added to Microsoft’s security update guidance. Improper limitation of a pathnTue, 14 Jul 2026 00:00:00 GMTMicrosoftVisual Studio Code Security Feature Bypasshttps://premierepc.com/security-briefs/cve-2026-47290https://premierepc.com/security-briefs/cve-2026-47290Microsoft Office Remote Code Execution vulnerability (CVE-2026-47290) was added to Microsoft’s security update guidance. Use after free in Microsoft OfficeTue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft Office Remote Code Executionhttps://premierepc.com/security-briefs/cve-2026-47295https://premierepc.com/security-briefs/cve-2026-47295Microsoft SQL Server Elevation of Privilege vulnerability (CVE-2026-47295) was added to Microsoft’s security update guidance. Improper neutralization of spTue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft SQL Server Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-47296https://premierepc.com/security-briefs/cve-2026-47296Microsoft SQL Server Elevation of Privilege vulnerability (CVE-2026-47296) was added to Microsoft’s security update guidance. Improper neutralization of spTue, 14 Jul 2026 00:00:00 GMTMicrosoftMicrosoft SQL Server Elevation of Privilegehttps://premierepc.com/security-briefs/cve-2026-47305https://premierepc.com/security-briefs/cve-2026-47305Visual Studio Remote Code Execution vulnerability (CVE-2026-47305) was added to Microsoft’s security update guidance. Protection mechanism failure in VisuaTue, 14 Jul 2026 00:00:00 GMTMicrosoftVisual Studio Remote Code Execution