CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

2 new sentences, beginning: “The release notes link has been updated to point to the latest available version.”

CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

The release notes link has been updated to point to the latest available version. Informational change only.

3 new sentences, beginning: “Updated the fixed version information and download link.”

CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Updates Table.

1 new sentence, beginning: “Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized…”

CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.

2 new sentences, beginning: “The release notes link has been updated to point to the latest available version.”

CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

The release notes link has been updated to point to the latest available version. Informational change only.

3 new sentences, beginning: “Updated the fixed version information and download link.”

CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Updates Table.

1 new sentence, beginning: “Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized…”

CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.

2 new sentences, beginning: “The release notes link has been updated to point to the latest available version.”

CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

The release notes link has been updated to point to the latest available version. Informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability

Acknowledgement Updated

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability

Acknowledgement Updated

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability

Acknowledgement Updated

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Updated an acknowledgement.”

CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Updated acknowledgment.”

CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability

Updated acknowledgment. This is an informational change only.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.”

CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Updated an acknowledgement.”

CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Updated acknowledgment.”

CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability

Updated acknowledgment. This is an informational change only.

2 new sentences, beginning: “Added acknowledgements.”

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

Added acknowledgements. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.”

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Added acknowledgements.”

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

Added acknowledgements. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.”

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Added acknowledgements.”

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

Added acknowledgements. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.”

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.”

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.”

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

Acknowledgement Updated

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.”

CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.”

CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.”

CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.”

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.”

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.”

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.”

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.”

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.”

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.”

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.”

CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.”

CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.”

CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

2 new sentences, beginning: “Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by…”

CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-50656. Please see the FAQ for more information on how to check if the new version has been installed.

3 new sentences, beginning: “Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly…”

CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.

2 new sentences, beginning: “Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by…”

CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-50656. Please see the FAQ for more information on how to check if the new version has been installed.

3 new sentences, beginning: “Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly…”

CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.

2 new sentences, beginning: “Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by…”

CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-50656. Please see the FAQ for more information on how to check if the new version has been installed.

3 new sentences, beginning: “Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly…”

CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.

2 new sentences, beginning: “Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by…”

CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-50656. Please see the FAQ for more information on how to check if the new version has been installed.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.”

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.”

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.”

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

2 new sentences, beginning: “Updated acknowledgment.”

CVE-2026-56182 Windows NTFS Elevation of Privilege Vulnerability

Updated acknowledgment. This is an informational change only.

1 new sentence, beginning: “Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.”

CVE-2026-56182 Windows NTFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated acknowledgment.”

CVE-2026-56182 Windows NTFS Elevation of Privilege Vulnerability

Updated acknowledgment. This is an informational change only.

1 new sentence, beginning: “Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.”

CVE-2026-56182 Windows NTFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated acknowledgment.”

CVE-2026-56182 Windows NTFS Elevation of Privilege Vulnerability

Updated acknowledgment. This is an informational change only.

1 new sentence, beginning: “Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.”

CVE-2026-56182 Windows NTFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated acknowledgment.”

CVE-2026-56182 Windows NTFS Elevation of Privilege Vulnerability

Updated acknowledgment. This is an informational change only.

1 new sentence, beginning: “Added SkiaSharp 4.151.2 to the affected software table.”

CVE-2026-58641 .NET Elevation of Privilege Vulnerability

Added SkiaSharp 4.151.2 to the affected software table.

1 new sentence, beginning: “Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.”

CVE-2026-58641 .NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.

1 new sentence, beginning: “Added SkiaSharp 4.151.2 to the affected software table.”

CVE-2026-58641 .NET Elevation of Privilege Vulnerability

Added SkiaSharp 4.151.2 to the affected software table.

1 new sentence, beginning: “Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.”

CVE-2026-58641 .NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.

1 new sentence, beginning: “Added SkiaSharp 4.151.2 to the affected software table.”

CVE-2026-58641 .NET Elevation of Privilege Vulnerability

Added SkiaSharp 4.151.2 to the affected software table.

1 new sentence, beginning: “Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.”

CVE-2026-58641 .NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.

1 new sentence, beginning: “Added SkiaSharp 4.151.2 to the affected software table.”

CVE-2026-58641 .NET Elevation of Privilege Vulnerability

Added SkiaSharp 4.151.2 to the affected software table.

1 new sentence, beginning: “The security updates for Powershell have been updated.”

CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability

The security updates for Powershell have been updated.

1 new sentence, beginning: “Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.”

CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “The security updates for Powershell have been updated.”

CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability

The security updates for Powershell have been updated.

1 new sentence, beginning: “Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.”

CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “The security updates for Powershell have been updated.”

CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability

The security updates for Powershell have been updated.

1 new sentence, beginning: “Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.”

CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “The security updates for Powershell have been updated.”

CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability

The security updates for Powershell have been updated.

1 new sentence, beginning: “Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.”

CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.”

CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.”

CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.”

CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.”

CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.”

CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.”

CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.”

CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Winlogon allows an authorized attacker to elevate privileges locally.”

CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Winlogon allows an authorized attacker to elevate privileges locally.”

CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Winlogon allows an authorized attacker to elevate privileges locally.”

CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.”

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.”

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.”

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

Acknowledgement Updated

The headline was rewritten. 2 new sentences, beginning: “Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File…”

CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability

Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File System Elevation of Privilege Vulnerability** and updated the acknowledgement. These are informational changes only.

The headline was rewritten. 1 new sentence, beginning: “Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver…”

CVE-2026-62705 Windows Bind Filter Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

The headline was rewritten. 2 new sentences, beginning: “Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File…”

CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability

Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File System Elevation of Privilege Vulnerability** and updated the acknowledgement. These are informational changes only.

The headline was rewritten. 1 new sentence, beginning: “Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver…”

CVE-2026-62705 Windows Bind Filter Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

The headline was rewritten. 2 new sentences, beginning: “Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File…”

CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability

Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File System Elevation of Privilege Vulnerability** and updated the acknowledgement. These are informational changes only.

The headline was rewritten. 1 new sentence, beginning: “Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver…”

CVE-2026-62705 Windows Bind Filter Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

The headline was rewritten. 2 new sentences, beginning: “Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File…”

CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability

Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File System Elevation of Privilege Vulnerability** and updated the acknowledgement. These are informational changes only.

The headline was rewritten. 1 new sentence, beginning: “Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.”

CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

The headline was rewritten. 2 new sentences, beginning: “Corrected the CVE description and title.”

CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability

Corrected the CVE description and title. This is an informational change only.

The headline was rewritten. 1 new sentence, beginning: “Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.”

CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

The headline was rewritten. 2 new sentences, beginning: “Corrected the CVE description and title.”

CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability

Corrected the CVE description and title. This is an informational change only.

The headline was rewritten. 1 new sentence, beginning: “Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.”

CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

The headline was rewritten. 2 new sentences, beginning: “Corrected the CVE description and title.”

CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability

Corrected the CVE description and title. This is an informational change only.

The headline was rewritten. 1 new sentence, beginning: “Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.”

CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated links to security updates.”

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

Updated links to security updates. This is an informational change only.

1 new sentence, beginning: “Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.”

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated links to security updates.”

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

Updated links to security updates. This is an informational change only.

1 new sentence, beginning: “Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.”

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated links to security updates.”

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

Updated links to security updates. This is an informational change only.

1 new sentence, beginning: “Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.”

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated links to security updates.”

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

Updated links to security updates. This is an informational change only.

2 new sentences, beginning: “Acknowledgement added.”

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability

Acknowledgement added. This is an informational change only.

1 new sentence, beginning: “Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.”

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Acknowledgement added.”

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability

Acknowledgement added. This is an informational change only.

1 new sentence, beginning: “Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.”

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Acknowledgement added.”

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability

Acknowledgement added. This is an informational change only.

1 new sentence, beginning: “Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.”

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Acknowledgement added.”

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability

Acknowledgement added. This is an informational change only.

1 new sentence, beginning: “Out-of-bounds write in.NET allows an unauthorized attacker to execute code locally.”

CVE-2026-62871 .NET Elevation of Privilege Vulnerability

Out-of-bounds write in.NET allows an unauthorized attacker to execute code locally.

2 new sentences, beginning: “Removed Linux and macOS products from the Affected Software table.”

CVE-2026-62871 .NET Elevation of Privilege Vulnerability

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

1 new sentence, beginning: “Out-of-bounds write in.NET allows an unauthorized attacker to execute code locally.”

CVE-2026-62871 .NET Elevation of Privilege Vulnerability

Out-of-bounds write in.NET allows an unauthorized attacker to execute code locally.

2 new sentences, beginning: “Removed Linux and macOS products from the Affected Software table.”

CVE-2026-62871 .NET Elevation of Privilege Vulnerability

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

1 new sentence, beginning: “Out-of-bounds write in.NET allows an unauthorized attacker to execute code locally.”

CVE-2026-62871 .NET Elevation of Privilege Vulnerability

Out-of-bounds write in.NET allows an unauthorized attacker to execute code locally.

2 new sentences, beginning: “Removed Linux and macOS products from the Affected Software table.”

CVE-2026-62871 .NET Elevation of Privilege Vulnerability

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

1 new sentence, beginning: “Out-of-bounds write in.NET allows an unauthorized attacker to execute code locally.”

CVE-2026-62871 .NET Elevation of Privilege Vulnerability

Out-of-bounds write in.NET allows an unauthorized attacker to execute code locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.”

CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.”

CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.”

CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability

Acknowledgement Updated

2 new sentences, beginning: “Removed Linux and macOS products from the Affected Software table.”

CVE-2026-62886 .NET Elevation of Privilege Vulnerability

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62886 .NET Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.”

CVE-2026-62886 .NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.

2 new sentences, beginning: “Removed Linux and macOS products from the Affected Software table.”

CVE-2026-62886 .NET Elevation of Privilege Vulnerability

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

1 new sentence, beginning: “Acknowledgement Updated”

CVE-2026-62886 .NET Elevation of Privilege Vulnerability

Acknowledgement Updated

1 new sentence, beginning: “Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.”

CVE-2026-62886 .NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in.NET allows an unauthorized attacker to elevate privileges locally.

2 new sentences, beginning: “Removed Linux and macOS products from the Affected Software table.”

CVE-2026-62886 .NET Elevation of Privilege Vulnerability

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.”

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.”

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.”

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.”

CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.”

CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.”

CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.”

CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.”

CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.”

CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.”

CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.”

CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

1 new sentence, beginning: “Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.”

CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

2 new sentences, beginning: “Updated an acknowledgement.”

CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability

Updated an acknowledgement. This is an informational change only.

2 new sentences, beginning: “CWE added.”

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

CWE added. Informational change only.

2 new sentences, beginning: “Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by…”

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-69414. Please see the FAQ for more information on how to check if the new version has been installed.

3 new sentences, beginning: “Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly…”

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.

2 new sentences, beginning: “CWE added.”

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

CWE added. Informational change only.

2 new sentences, beginning: “Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by…”

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-69414. Please see the FAQ for more information on how to check if the new version has been installed.

3 new sentences, beginning: “Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly…”

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.

2 new sentences, beginning: “CWE added.”

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

CWE added. Informational change only.