#windows

共收录 2186 条相关情报。

← 返回所有主题

安全公告2026-05-12 发布INFO

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-40365

Insufficient granularity of access control in Microsoft Office SharePoint allows an authorized attacker to execute code

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-40362

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Word Remote Code Execution Vulnerability

CVE-2026-40361

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-40359

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Office Remote Code Execution Vulnerability

CVE-2026-40358

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-40357

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

CVE-2026-34341

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-34340

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2026-34339

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny s

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-34338

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows DWM Core Library Information Disclosure Vulnerability

CVE-2026-34336

Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows TCP/IP Elevation of Privilege Vulnerability

CVE-2026-34334

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Kernel-Mode Driver Remote Code Execution Vulnerability

CVE-2026-34332

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVE-2026-33838

Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Windows TCP/IP Local Elevation of Privilege Vulnerability

CVE-2026-33837

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Azure Machine Learning Notebook Spoofing Vulnerability

CVE-2026-33833

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Lear

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-33112

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-33110

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

ASP.NET Core Denial of Service Vulnerability

CVE-2026-42899

Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service o

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

CVE-2026-42898

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized a

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows