Detect and disrupt AI-themed attacks with Microsoft Defender

See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack c

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

Chromium: CVE-2026-85046 Type confusion in V8

CVE-2026-85046

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

CVE-2026-19654

Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote p

历史摘要 · 未重新核验 · Microsoft MSRC

Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

CVE-2026-13622

Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

历史摘要 · 未重新核验 · Microsoft MSRC

Threat matrix: Mapping threats across cloud web applications

Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders und

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

Passkey-themed social engineering leads to identity and cloud compromise

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how thr

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83981

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83973

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83968

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows iSCSI Remote Code Execution Vulnerability

CVE-2026-69598

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Word Remote Code Execution Vulnerability

CVE-2026-62804

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Skype for Business and Lync Denial of Service Vulnerability

CVE-2026-66307

Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a netw

历史摘要 · 未重新核验 · Microsoft MSRC

Skype for Business and Lync Denial of Service Vulnerability

CVE-2026-66303

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2026-83498

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to el

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability

CVE-2026-84003

Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized at

历史摘要 · 未重新核验 · Microsoft MSRC

Windows WebClient Service Elevation of Privilege Vulnerability

CVE-2026-72965

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Office Word Information Disclosure Vulnerability

CVE-2026-83949

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVE-2026-69530

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Office Word Information Disclosure Vulnerability

CVE-2026-83951

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

CVE-2026-83501

Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose info

历史摘要 · 未重新核验 · Microsoft MSRC