Connexion
CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
Vue lecture
CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-81357 Visual Studio Code Security Feature Bypass Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69637 Windows DHCP Server Denial of Service Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69803 Windows DHCP Server Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-81951 Microsoft Excel Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Chromium CVE-2026-87564: Type confusion in V8
Information published.
Chromium CVE-2026-87587: Use after free in V8
Information published.
CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.
CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability
Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.
CVE-2026-70125 Microsoft Outlook Remote Code Execution Vulnerability
Information published. This CVE was addressed by updates that were released in September 2026, but the CVE was inadvertently omitted from the September 2026 Security Updates. This is an informational change only. Customers who have already installed the September 2026 updates do not need to take any further action.
Chromium CVE-2026-87564: Type confusion in V8
Information published.
Chromium CVE-2026-87587: Use after free in V8
Information published.
Chromium CVE-2026-87612: Type confusion in V8
Information published.
Chromium CVE-2026-87489: Memory corruption in V8
Information published.
Chromium CVE-2026-87536: Use after free in V8
Information published.
Chromium CVE-2026-87625: Use after free in V8
Information published.
Chromium CVE-2026-87601: Race condition in V8
Information published.
CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-77886 Windows DHCP Server Denial of Service Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69498 Windows Win32k Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-55134 Microsoft Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
Updated an acknowledgement. This is an informational change only.
