Microsoft security briefs
3323 published alerts for Microsoft products and services.
Microsoft VOLSNAP.SYS Elevation of Privilege vulnerability
Microsoft VOLSNAP.SYS Elevation of Privilege vulnerability (CVE-2026-69420) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office SharePoint Spoofing vulnerability
Microsoft Office SharePoint Spoofing vulnerability (CVE-2026-69417) was added to Microsoft’s security update guidance. <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows DHCP Server Denial of Service vulnerability
Windows DHCP Server Denial of Service vulnerability (CVE-2026-69416) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows DHCP Server Elevation of Privilege vulnerability
Windows DHCP Server Elevation of Privilege vulnerability (CVE-2026-69415) was added to Microsoft’s security update guidance. Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege vulnerability
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege vulnerability (CVE-2026-69413) was added to Microsoft’s security update guidance. Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows DHCP Server Remote Code Execution vulnerability
Windows DHCP Server Remote Code Execution vulnerability (CVE-2026-69412) was added to Microsoft’s security update guidance. Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. If you need help checking exposure, call (864) 335-9223.
Windows Win32k Elevation of Privilege vulnerability
Windows Win32k Elevation of Privilege vulnerability (CVE-2026-69410) was added to Microsoft’s security update guidance. <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office SharePoint Information Disclosure vulnerability
Microsoft Office SharePoint Information Disclosure vulnerability (CVE-2026-69409) was added to Microsoft’s security update guidance. <p>Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Media Foundation Remote Code Execution vulnerability
Microsoft Windows Media Foundation Remote Code Execution vulnerability (CVE-2026-69408) was added to Microsoft’s security update guidance. <p>Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Kernel Information Disclosure vulnerability
Windows Kernel Information Disclosure vulnerability (CVE-2026-69406) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows DHCP Server Denial of Service vulnerability
Windows DHCP Server Denial of Service vulnerability (CVE-2026-69405) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows TCP/IP Elevation of Privilege vulnerability
Windows TCP/IP Elevation of Privilege vulnerability (CVE-2026-69404) was added to Microsoft’s security update guidance. <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows SMB Server Information Disclosure vulnerability
Windows SMB Server Information Disclosure vulnerability (CVE-2026-69403) was added to Microsoft’s security update guidance. <p>Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office SharePoint Spoofing vulnerability
Microsoft Office SharePoint Spoofing vulnerability (CVE-2026-69402) was added to Microsoft’s security update guidance. <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Bluetooth Service Elevation of Privilege vulnerability
Windows Bluetooth Service Elevation of Privilege vulnerability (CVE-2026-69398) was added to Microsoft’s security update guidance. <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft OpenSSH for Windows Remote Code Execution vulnerability
Microsoft OpenSSH for Windows Remote Code Execution vulnerability (CVE-2026-69397) was added to Microsoft’s security update guidance. <p>Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows NDIS Elevation of Privilege vulnerability
Windows NDIS Elevation of Privilege vulnerability (CVE-2026-69396) was added to Microsoft’s security update guidance. <p>Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Audio Service Elevation of Privilege vulnerability
Windows Audio Service Elevation of Privilege vulnerability (CVE-2026-69394) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Spaceport.sys Information Disclosure vulnerability
Windows Spaceport.sys Information Disclosure vulnerability (CVE-2026-69393) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network. If you need help checking exposure, call (864) 335-9223.
Windows Shell Elevation of Privilege vulnerability
Windows Shell Elevation of Privilege vulnerability (CVE-2026-69392) was added to Microsoft’s security update guidance. <p>Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Broker Infrastructure Service Elevation of Privilege vulnerability
Windows Broker Infrastructure Service Elevation of Privilege vulnerability (CVE-2026-69391) was added to Microsoft’s security update guidance. <p>Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Spaceport.sys Information Disclosure vulnerability
Windows Spaceport.sys Information Disclosure vulnerability (CVE-2026-69390) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows Storage Management Provider Elevation of Privilege vulnerability
Windows Storage Management Provider Elevation of Privilege vulnerability (CVE-2026-69389) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Bluetooth Service Elevation of Privilege vulnerability
Windows Bluetooth Service Elevation of Privilege vulnerability (CVE-2026-69388) was added to Microsoft’s security update guidance. <p>Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.