vulnerabilityvia Microsoft Security Update Guide
CVE-2026-102870 ASP.NET Core Remote Code Execution Vulnerability
Updated product information in the Software Update table. This is an informational change only.
Oct 25, 2026 UTC
Security news
Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Oct 25, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network.
Oct 25, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability
Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8...
Oct 23, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-102208 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Acknowledgement Updated
Oct 23, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
Oct 22, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
Oct 22, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
Oct 22, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
Oct 22, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
Oct 22, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
Oct 22, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.
Oct 22, 2026 UTC