Turning threat intelligence into decisive action with Defender Experts

Security teams have never had more visibility, yet rarely have they felt more uncertain. Signal pours in from endpoints,

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

CVE-2026-13221

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 6553

历史摘要 · 未重新核验 · Microsoft MSRC

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

CVE-2026-57432

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack

历史摘要 · 未重新核验 · Microsoft MSRC

M365 Copilot for iOS Elevation of Privilege Vulnerability

CVE-2026-58617

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-58613

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-58536

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

CVE-2026-41109

Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

CVE-2026-58529

Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Office Information Disclosure Vulnerability

CVE-2026-55121

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Network Address Translation (NAT) Spoofing Vulnerability

CVE-2026-56181

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Boot Loader Security Feature Bypass Vulnerability

CVE-2026-58638

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Client-Side Caching Elevation of Privilege Vulnerability

CVE-2026-58637

Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-58634

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-58633

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2026-58632

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2026-58629

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Wireless Network Manager Elevation of Privilege Vulnerability

CVE-2026-58628

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networki

历史摘要 · 未重新核验 · Microsoft MSRC

Windows DHCP Server Denial of Service Vulnerability

CVE-2026-58627

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2026-58626

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Sensor Data Service Elevation of Privilege Vulnerability

CVE-2026-58619

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC