Windows Audio Service Information Disclosure vulnerability
Windows Audio Service Information Disclosure vulnerability (CVE-2026-34328) was added to Microsoft’s security update guidance. Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows Ancillary Function Driver for WinSock Information Disclosure vulnerability
Windows Ancillary Function Driver for WinSock Information Disclosure vulnerability (CVE-2026-34346) was added to Microsoft’s security update guidance. Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows Event Logging Service Information Disclosure vulnerability
Windows Event Logging Service Information Disclosure vulnerability (CVE-2026-34348) was added to Microsoft’s security update guidance. Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows Media Information Disclosure vulnerability
Windows Media Information Disclosure vulnerability (CVE-2026-34349) was added to Microsoft’s security update guidance. Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability (CVE-2026-40378) was added to Microsoft’s security update guidance. Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows PowerShell Remote Code Execution vulnerability
Windows PowerShell Remote Code Execution vulnerability (CVE-2026-40400) was added to Microsoft’s security update guidance. Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows File Explorer Information Disclosure vulnerability
Windows File Explorer Information Disclosure vulnerability (CVE-2026-40422) was added to Microsoft’s security update guidance. Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows File Explorer Information Disclosure vulnerability
Windows File Explorer Information Disclosure vulnerability (CVE-2026-41087) was added to Microsoft’s security update guidance. Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Microsoft Exchange Server Spoofing vulnerability
Microsoft Exchange Server Spoofing vulnerability (CVE-2026-42897) was added to Microsoft’s security update guidance. Updated FAQ information. This is an informational change only. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Microsoft Windows App Store Elevation of Privilege vulnerability
Microsoft Windows App Store Elevation of Privilege vulnerability (CVE-2026-42900) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows Bluetooth Port Driver Remote Code Execution vulnerability
Windows Bluetooth Port Driver Remote Code Execution vulnerability (CVE-2026-42975) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows Secure Kernel Mode Elevation of Privilege vulnerability
Windows Secure Kernel Mode Elevation of Privilege vulnerability (CVE-2026-42982) was added to Microsoft’s security update guidance. Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
SQL Server ODBC driver Elevation of Privilege vulnerability
SQL Server ODBC driver Elevation of Privilege vulnerability (CVE-2026-42990) was added to Microsoft’s security update guidance. Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows Push Notifications Elevation of Privilege vulnerability
Windows Push Notifications Elevation of Privilege vulnerability (CVE-2026-44800) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Windows Secure Channel Denial of Service vulnerability
Windows Secure Channel Denial of Service vulnerability (CVE-2026-44806) was added to Microsoft’s security update guidance. Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Visual Studio Code Security Feature Bypass vulnerability
Visual Studio Code Security Feature Bypass vulnerability (CVE-2026-45496) was added to Microsoft’s security update guidance. Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Microsoft Office Remote Code Execution vulnerability
Microsoft Office Remote Code Execution vulnerability (CVE-2026-47290) was added to Microsoft’s security update guidance. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Microsoft SQL Server Elevation of Privilege vulnerability
Microsoft SQL Server Elevation of Privilege vulnerability (CVE-2026-47295) was added to Microsoft’s security update guidance. Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Microsoft SQL Server Elevation of Privilege vulnerability
Microsoft SQL Server Elevation of Privilege vulnerability (CVE-2026-47296) was added to Microsoft’s security update guidance. Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Visual Studio Remote Code Execution vulnerability
Visual Studio Remote Code Execution vulnerability (CVE-2026-47305) was added to Microsoft’s security update guidance. Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Azure Resource Manager Elevation of Privilege vulnerability
Azure Resource Manager Elevation of Privilege vulnerability (CVE-2026-24304) was added to Microsoft’s security update guidance. Informational Change. CVE ID stays the same. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Azure Cosmos DB Remote Code Execution vulnerability
Azure Cosmos DB Remote Code Execution vulnerability (CVE-2026-66803) was added to Microsoft’s security update guidance. Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Azure Portal Information Disclosure vulnerability
Azure Portal Information Disclosure vulnerability (CVE-2026-62835) was added to Microsoft’s security update guidance. Corrected the CVE description and title. This is an informational change only. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.
Azure API Management (APIM) Remote Code Execution vulnerability
Azure API Management (APIM) Remote Code Execution vulnerability (CVE-2026-35425) was added to Microsoft’s security update guidance. Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.