Microsoft security briefs
3323 published alerts for Microsoft products and services.
Windows Program Compatibility Assistant Service Elevation of Privilege vulnerability
Windows Program Compatibility Assistant Service Elevation of Privilege vulnerability (CVE-2026-68876) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows NTFS Remote Code Execution vulnerability
Windows NTFS Remote Code Execution vulnerability (CVE-2026-68875) was added to Microsoft’s security update guidance. Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. If you need help checking exposure, call (864) 335-9223.
Windows Program Compatibility Assistant Service Information Disclosure vulnerability
Windows Program Compatibility Assistant Service Information Disclosure vulnerability (CVE-2026-68874) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network. If you need help checking exposure, call (864) 335-9223.
Windows Program Compatibility Assistant Service Information Disclosure vulnerability
Windows Program Compatibility Assistant Service Information Disclosure vulnerability (CVE-2026-68873) was added to Microsoft’s security update guidance. Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Microsoft Account Information Disclosure vulnerability
Microsoft Account Information Disclosure vulnerability (CVE-2026-68852) was added to Microsoft’s security update guidance. Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Information Disclosure vulnerability
Windows NTFS Information Disclosure vulnerability (CVE-2026-68851) was added to Microsoft’s security update guidance. <p>Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Account Elevation of Privilege vulnerability
Microsoft Account Elevation of Privilege vulnerability (CVE-2026-68850) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Bluetooth Port Driver Information Disclosure vulnerability
Windows Bluetooth Port Driver Information Disclosure vulnerability (CVE-2026-68849) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows Print Spooler Components Elevation of Privilege vulnerability
Windows Print Spooler Components Elevation of Privilege vulnerability (CVE-2026-68848) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Kernel Elevation of Privilege vulnerability
Windows Kernel Elevation of Privilege vulnerability (CVE-2026-68846) was added to Microsoft’s security update guidance. <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Program Compatibility Assistant Service Elevation of Privilege vulnerability
Windows Program Compatibility Assistant Service Elevation of Privilege vulnerability (CVE-2026-68845) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Storage Spaces Controller Remote Code Execution vulnerability
Windows Storage Spaces Controller Remote Code Execution vulnerability (CVE-2026-68844) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office Word Information Disclosure vulnerability
Microsoft Office Word Information Disclosure vulnerability (CVE-2026-68843) was added to Microsoft’s security update guidance. Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.
Windows MIDI Service Module Information Disclosure vulnerability
Windows MIDI Service Module Information Disclosure vulnerability (CVE-2026-68842) was added to Microsoft’s security update guidance. <p>Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows NTFS Elevation of Privilege vulnerability
Windows NTFS Elevation of Privilege vulnerability (CVE-2026-68841) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows USB Driver Elevation of Privilege vulnerability
Windows USB Driver Elevation of Privilege vulnerability (CVE-2026-68840) was added to Microsoft’s security update guidance. <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows USB Mass Storage Class Driver Remote Code Execution vulnerability
Windows USB Mass Storage Class Driver Remote Code Execution vulnerability (CVE-2026-68839) was added to Microsoft’s security update guidance. Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Elevation of Privilege vulnerability
Windows NTFS Elevation of Privilege vulnerability (CVE-2026-68838) was added to Microsoft’s security update guidance. Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Windows File History Service Elevation of Privilege vulnerability
Windows File History Service Elevation of Privilege vulnerability (CVE-2026-68837) was added to Microsoft’s security update guidance. <p>Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.</p> If you need help checking exposure, call (864) 335-9223.
Windows Print Spooler Components Elevation of Privilege vulnerability
Windows Print Spooler Components Elevation of Privilege vulnerability (CVE-2026-68835) was added to Microsoft’s security update guidance. <p>Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows NTFS Elevation of Privilege vulnerability
Windows NTFS Elevation of Privilege vulnerability (CVE-2026-68834) was added to Microsoft’s security update guidance. <p>Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows NTFS Remote Code Execution vulnerability
Windows NTFS Remote Code Execution vulnerability (CVE-2026-68833) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.</p> If you need help checking exposure, call (864) 335-9223.
Windows NTFS Elevation of Privilege vulnerability
Windows NTFS Elevation of Privilege vulnerability (CVE-2026-68832) was added to Microsoft’s security update guidance. Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.
Windows Defender Firewall Service Information Disclosure vulnerability
Windows Defender Firewall Service Information Disclosure vulnerability (CVE-2026-68831) was added to Microsoft’s security update guidance. Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.