Microsoft security briefs
3323 published alerts for Microsoft products and services.
Windows DHCP Server Remote Code Execution vulnerability
Windows DHCP Server Remote Code Execution vulnerability (CVE-2026-69547) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Active Directory Domain Services Remote Code Execution vulnerability
Windows Active Directory Domain Services Remote Code Execution vulnerability (CVE-2026-69546) was added to Microsoft’s security update guidance. <p>Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows SMB Client Elevation of Privilege vulnerability
Windows SMB Client Elevation of Privilege vulnerability (CVE-2026-69544) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Camera Frame Server Monitor Elevation of Privilege vulnerability
Windows Camera Frame Server Monitor Elevation of Privilege vulnerability (CVE-2026-69542) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Audio Service Elevation of Privilege vulnerability
Windows Audio Service Elevation of Privilege vulnerability (CVE-2026-69540) was added to Microsoft’s security update guidance. <p>Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Spaceport.sys Remote Code Execution vulnerability
Windows Spaceport.sys Remote Code Execution vulnerability (CVE-2026-69538) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows Spaceport.sys Elevation of Privilege vulnerability
Windows Spaceport.sys Elevation of Privilege vulnerability (CVE-2026-69535) was added to Microsoft’s security update guidance. Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Program Compatibility Assistant Service Elevation of Privilege vulnerability
Windows Program Compatibility Assistant Service Elevation of Privilege vulnerability (CVE-2026-69534) was added to Microsoft’s security update guidance. <p>Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows NTFS Elevation of Privilege vulnerability
Windows NTFS Elevation of Privilege vulnerability (CVE-2026-69532) was added to Microsoft’s security update guidance. <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Speech Tampering vulnerability
Microsoft Windows Speech Tampering vulnerability (CVE-2026-69531) was added to Microsoft’s security update guidance. <p>Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution vulnerability
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution vulnerability (CVE-2026-69530) was added to Microsoft’s security update guidance. <p>Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office Access Remote Code Execution vulnerability
Microsoft Office Access Remote Code Execution vulnerability (CVE-2026-69529) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Shell Elevation of Privilege vulnerability
Windows Shell Elevation of Privilege vulnerability (CVE-2026-69528) was added to Microsoft’s security update guidance. Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows USB Mass Storage Class Driver Information Disclosure vulnerability
Windows USB Mass Storage Class Driver Information Disclosure vulnerability (CVE-2026-69527) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows Active Directory Domain Services Remote Code Execution vulnerability
Windows Active Directory Domain Services Remote Code Execution vulnerability (CVE-2026-69524) was added to Microsoft’s security update guidance. <p>Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Remote Desktop Remote Code Execution vulnerability
Windows Remote Desktop Remote Code Execution vulnerability (CVE-2026-69518) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Wireless Networking Elevation of Privilege vulnerability
Windows Wireless Networking Elevation of Privilege vulnerability (CVE-2026-69517) was added to Microsoft’s security update guidance. <p>Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Error Reporting Elevation of Privilege vulnerability
Windows Error Reporting Elevation of Privilege vulnerability (CVE-2026-69513) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Spaceport.sys Elevation of Privilege vulnerability
Windows Spaceport.sys Elevation of Privilege vulnerability (CVE-2026-69512) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Media Foundation Remote Code Execution vulnerability
Microsoft Windows Media Foundation Remote Code Execution vulnerability (CVE-2026-69511) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows DHCP Server Remote Code Execution vulnerability
Windows DHCP Server Remote Code Execution vulnerability (CVE-2026-69510) was added to Microsoft’s security update guidance. <p>Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows MIDI Service Module Elevation of Privileges vulnerability
Windows MIDI Service Module Elevation of Privileges vulnerability (CVE-2026-69508) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Search Component Information Disclosure vulnerability
Microsoft Windows Search Component Information Disclosure vulnerability (CVE-2026-69507) was added to Microsoft’s security update guidance. Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Elevation of Privilege vulnerability
Windows NTFS Elevation of Privilege vulnerability (CVE-2026-69505) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.