Microsoft security briefs
4529 published alerts for Microsoft products and services.
Windows Internet Information Services Denial of Service vulnerability
Windows Internet Information Services Denial of Service vulnerability (CVE-2026-97830) was added to Microsoft’s security update guidance. <p>Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft OpenSSH for Windows Remote Code Execution vulnerability
Microsoft OpenSSH for Windows Remote Code Execution vulnerability (CVE-2026-97816) was added to Microsoft’s security update guidance. <p>Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Error Reporting Remote Code Execution vulnerability
Windows Error Reporting Remote Code Execution vulnerability (CVE-2026-97815) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Text Shaping Remote Code Execution vulnerability
Windows Text Shaping Remote Code Execution vulnerability (CVE-2026-97814) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Hyper-V Information Disclosure vulnerability
Windows Hyper-V Information Disclosure vulnerability (CVE-2026-97813) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Update Orchestrator Service Elevation of Privilege vulnerability
Windows Update Orchestrator Service Elevation of Privilege vulnerability (CVE-2026-97812) was added to Microsoft’s security update guidance. <p>Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft OpenSSH for Windows Elevation of Privilege vulnerability
Microsoft OpenSSH for Windows Elevation of Privilege vulnerability (CVE-2026-97811) was added to Microsoft’s security update guidance. <p>Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege vulnerability
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege vulnerability (CVE-2026-97810) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Broadcast DVR User Service Elevation of Privilege vulnerability
Windows Broadcast DVR User Service Elevation of Privilege vulnerability (CVE-2026-97809) was added to Microsoft’s security update guidance. <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Broadcast DVR User Service Elevation of Privilege vulnerability
Windows Broadcast DVR User Service Elevation of Privilege vulnerability (CVE-2026-97808) was added to Microsoft’s security update guidance. <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Broadcast DVR User Service Elevation of Privilege vulnerability
Windows Broadcast DVR User Service Elevation of Privilege vulnerability (CVE-2026-97807) was added to Microsoft’s security update guidance. <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Broadcast DVR User Service Elevation of Privilege vulnerability
Windows Broadcast DVR User Service Elevation of Privilege vulnerability (CVE-2026-97806) was added to Microsoft’s security update guidance. <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Partition Management Driver Remote Code Execution vulnerability
Windows Partition Management Driver Remote Code Execution vulnerability (CVE-2026-97805) was added to Microsoft’s security update guidance. <p>Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Kernel Elevation of Privilege vulnerability
Windows Kernel Elevation of Privilege vulnerability (CVE-2026-97803) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Mobile Broadband Elevation of Privilege vulnerability
Windows Mobile Broadband Elevation of Privilege vulnerability (CVE-2026-97800) was added to Microsoft’s security update guidance. <p>Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Audio Service Elevation of Privilege vulnerability
Windows Audio Service Elevation of Privilege vulnerability (CVE-2026-97799) was added to Microsoft’s security update guidance. <p>Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Error Reporting Service Elevation of Privilege vulnerability
Windows Error Reporting Service Elevation of Privilege vulnerability (CVE-2026-97798) was added to Microsoft’s security update guidance. <p>Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege vulnerability
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege vulnerability (CVE-2026-97794) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Setup and Deployment Elevation of Privilege vulnerability
Windows Setup and Deployment Elevation of Privilege vulnerability (CVE-2026-97793) was added to Microsoft’s security update guidance. <p>Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege vulnerability
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege vulnerability (CVE-2026-97792) was added to Microsoft’s security update guidance. <p>Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering vulnerability
Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering vulnerability (CVE-2026-97790) was added to Microsoft’s security update guidance. <p>Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege vulnerability
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege vulnerability (CVE-2026-97787) was added to Microsoft’s security update guidance. <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office SharePoint Spoofing vulnerability
Microsoft Office SharePoint Spoofing vulnerability (CVE-2026-97783) was added to Microsoft’s security update guidance. <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office SharePoint Tampering vulnerability
Microsoft Office SharePoint Tampering vulnerability (CVE-2026-97782) was added to Microsoft’s security update guidance. <p>Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.</p> If you need help checking exposure, call (864) 335-9223.