#msrc

共收录 2178 条相关情报。

← 返回所有主题

安全公告2026-05-12 发布INFO

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

CVE-2026-40418

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40413

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2026-40403

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-40402

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows TCP/IP Denial of Service Vulnerability

CVE-2026-40401

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Remote Desktop Services Elevation of Privilege Vulnerability

CVE-2026-40398

Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability

CVE-2026-32209

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature l

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2026-40397

Integer underflow (wrap or wraparound) in Windows Common Log File System Driver allows an authorized attacker to elevate

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-40382

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-40369

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

SQL Server Remote Code Execution Vulnerability

CVE-2026-40370

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Word Remote Code Execution Vulnerability

CVE-2026-40367

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-40365

Insufficient granularity of access control in Microsoft Office SharePoint allows an authorized attacker to execute code

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-40362

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Word Remote Code Execution Vulnerability

CVE-2026-40361

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-40359

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Office Remote Code Execution Vulnerability

CVE-2026-40358

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-40357

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

CVE-2026-34341

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-34340

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows