ConnexionCVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
20 août 2026 à 16:00
Added clarifying information to the mitigation. This is an informational change only.
Vue normale
Reçu — 20 août 2026
⏭
MSRC Security Update Guide
-
MSRC Security Update Guide
- CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability
20 août 2026 à 16:00
The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability
20 août 2026 à 16:00
The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
-
- CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
20 août 2026 à 16:00
Corrected the Executive Summary to clarify that the vulnerability affects Windows Device Health Attestation (DHA), not Microsoft Azure Attestation. This is an informational change only.
CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability
20 août 2026 à 16:00
Updated links to security updates. This is an informational change only.
-
- CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
20 août 2026 à 16:00
Corrected the Executive Summary to clarify that the vulnerability affects Windows Device Health Attestation (DHA), not Microsoft Azure Attestation. This is an informational change only.
Reçu — 19 août 2026
⏭
MSRC Security Update Guide
CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
19 août 2026 à 16:00
CWE added. Informational change only.
CVE-2020-1173 Microsoft Power BI Report Server Spoofing Vulnerability
19 août 2026 à 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2021-26859 Microsoft Power BI Information Disclosure Vulnerability
19 août 2026 à 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2021-41372 Power BI Report Server Spoofing Vulnerability
19 août 2026 à 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2023-21806 Power BI Report Server Spoofing Vulnerability
19 août 2026 à 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2024-43612 Power BI Report Server Spoofing Vulnerability
19 août 2026 à 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2024-43481 Power BI Report Server Spoofing Vulnerability
19 août 2026 à 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability
19 août 2026 à 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability
19 août 2026 à 16:00
CWE added. Informational change only.
CVE-2026-65811 Power BI Remote Code Execution Vulnerability
19 août 2026 à 16:00
Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.
-
- CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability
CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability
19 août 2026 à 16:00
Acknowledgement Updated
CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability
19 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-42912 Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-42912 Windows Telephony Service Elevation of Privilege Vulnerability
19 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
19 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability
19 août 2026 à 16:00
Corrected the CVE title from **Windows Bind Filter Driver Elevation of Privilege Vulnerability** to **Microsoft Brokering File System Elevation of Privilege Vulnerability** and updated the acknowledgement. These are informational changes only.
-
- CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
18 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
18 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability
CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability
18 août 2026 à 16:00
Updated the Security Updates table by removing an affected software entry. No user action is required. This is an informational change only.
Reçu — 18 août 2026
⏭
MSRC Security Update Guide
CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability
18 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability
CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability
18 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability
18 août 2026 à 16:00
Corrected the affected product from **Azure Monitor Agent Metrics Extension** to **Azure Connected Machine Agent** and updated the Security Updates table. This is an informational change only.
CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability
18 août 2026 à 16:00
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
-
- CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability
CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability
17 août 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
Reçu — 17 août 2026
⏭
MSRC Security Update Guide
-
- CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability
17 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability
17 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability
17 août 2026 à 16:00
Acknowledgement Updated
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
17 août 2026 à 16:00
Acknowledgement Updated
CVE-2026-58612 PowerShell Information Disclosure Vulnerability
17 août 2026 à 16:00
Acknowledgement Updated
CVE-2026-62886 .NET Elevation of Privilege Vulnerability
17 août 2026 à 16:00
Acknowledgement Updated
CVE-2026-63518 Microsoft Office Word Remote Code Execution Vulnerability
17 août 2026 à 16:00
Acknowledgement Updated
CVE-2026-40400 Windows PowerShell Remote Code Execution Vulnerability
17 août 2026 à 16:00
Acknowledgement Updated
-
- CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability
17 août 2026 à 16:00
Corrected the CVE description and title. This is an informational change only.
Reçu — 16 août 2026
⏭
MSRC Security Update Guide
CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability
16 août 2026 à 16:00
Corrected build number for the security update. This in an informational change only.
-
- CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
16 août 2026 à 16:00
Corrected build number for the security update. This in an informational change only.
