Microsoft security briefs
3323 published alerts for Microsoft products and services.
Windows Print Spooler Information Disclosure vulnerability
Windows Print Spooler Information Disclosure vulnerability (CVE-2026-50383) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Kernel Elevation of Privilege vulnerability
Windows Kernel Elevation of Privilege vulnerability (CVE-2026-49798) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Telephony Service Elevation of Privilege vulnerability
Windows Telephony Service Elevation of Privilege vulnerability (CVE-2026-42912) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Microsoft Power BI Information Disclosure vulnerability
Microsoft Power BI Information Disclosure vulnerability (CVE-2021-26859) was added to Microsoft’s security update guidance. Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Power BI Report Server Spoofing vulnerability
Microsoft Power BI Report Server Spoofing vulnerability (CVE-2020-1173) was added to Microsoft’s security update guidance. Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Fabric Data Warehouse Remote Code Execution vulnerability
Microsoft Fabric Data Warehouse Remote Code Execution vulnerability (CVE-2026-56642) was added to Microsoft’s security update guidance. Updated the Security Updates table by removing an affected software entry. No user action is required. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft SharePoint Weak Authentication Vulnerability
Microsoft SharePoint is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-55040). Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network. CISA remediation due date: 2026-08-21. If you need help checking exposure, call (864) 335-9223.
Windows Kernel Information Disclosure vulnerability
Windows Kernel Information Disclosure vulnerability (CVE-2026-50419) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Azure Connected Machine Agent Elevation of Privilege vulnerability
Azure Connected Machine Agent Elevation of Privilege vulnerability (CVE-2026-47632) was added to Microsoft’s security update guidance. Corrected the affected product from **Azure Monitor Agent Metrics Extension** to **Azure Connected Machine Agent** and updated the Security Updates table. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft Internet Key Exchange (IKE) Service Extensions is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-33824). Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution. CISA remediation due date: 2026-08-21. If you need help checking exposure, call (864) 335-9223.
Microsoft Copilot Information Disclosure vulnerability
Microsoft Copilot Information Disclosure vulnerability (CVE-2026-24301) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Microsoft Office Graphics Component Remote Code Execution vulnerability
Microsoft Office Graphics Component Remote Code Execution vulnerability (CVE-2026-63519) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Microsoft Office Word Remote Code Execution vulnerability
Microsoft Office Word Remote Code Execution vulnerability (CVE-2026-63518) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Microsoft Office Graphics Component Remote Code Execution vulnerability
Microsoft Office Graphics Component Remote Code Execution vulnerability (CVE-2026-63513) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Server Network driver Remote Code Execution vulnerability
Windows Server Network driver Remote Code Execution vulnerability (CVE-2026-56188) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Teams iOS Information Disclosure vulnerability
Microsoft Teams iOS Information Disclosure vulnerability (CVE-2026-65769) was added to Microsoft’s security update guidance. Corrected build number for the security update. This in an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Teams Remote Code Execution vulnerability
Microsoft Teams Remote Code Execution vulnerability (CVE-2026-65768) was added to Microsoft’s security update guidance. Corrected build number for the security update. This in an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft High Performance Computing (HPC) Pack Remote Code Execution vulnerability
Microsoft High Performance Computing (HPC) Pack Remote Code Execution vulnerability (CVE-2026-59124) was added to Microsoft’s security update guidance. Corrected the listed software in the Security Updates table. Microsoft recommends installing the security update as soon as possible. If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-72970) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Defender Elevation of Privilege vulnerability
Microsoft Defender Elevation of Privilege vulnerability (CVE-2026-69414) was added to Microsoft’s security update guidance. Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-69414. Please see the FAQ for more information on how to check if the new version has been installed. If you need help checking exposure, call (864) 335-9223.
Windows License Manager Elevation of Privilege vulnerability
Windows License Manager Elevation of Privilege vulnerability (CVE-2026-62777) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Event Logging Service Information Disclosure vulnerability
Windows Event Logging Service Information Disclosure vulnerability (CVE-2026-61347) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Windows Event Logging Service Elevation of Privilege vulnerability
Windows Event Logging Service Elevation of Privilege vulnerability (CVE-2026-59126) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.
Microsoft PowerShell Remote Code Execution vulnerability
Microsoft PowerShell Remote Code Execution vulnerability (CVE-2026-50523) was added to Microsoft’s security update guidance. The security updates for Powershell have been updated. If you need help checking exposure, call (864) 335-9223.