Vulnerabilities and patches across Windows, Exchange Server, Outlook, Active Directory, and Azure — including Patch Tuesday triage and zero-days under active exploitation. Combined article + CVE feed for the Microsoft beat.https://0daynews.com/en-ushttps://0daynews.com/articles/2026-08-13-legacyhive-windows-zero-day-patch/https://0daynews.com/articles/2026-08-13-legacyhive-windows-zero-day-patch/Microsoft issued a patch for LegacyHive, a named Windows zero-day disclosed in the gap between July and August Patch Tuesday cycles.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftarticlehttps://0daynews.com/cve/cve-2002-0367/https://0daynews.com/cve/cve-2002-0367/smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2004-0210/https://0daynews.com/cve/cve-2004-0210/A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2006-2492/https://0daynews.com/cve/cve-2006-2492/Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2007-0671/https://0daynews.com/cve/cve-2007-0671/Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2008-0015/https://0daynews.com/cve/cve-2008-0015/Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2008-4250/https://0daynews.com/cve/cve-2008-4250/Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2009-0238/https://0daynews.com/cve/cve-2009-0238/Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2009-0556/https://0daynews.com/cve/cve-2009-0556/Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2009-0557/https://0daynews.com/cve/cve-2009-0557/Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2009-0563/https://0daynews.com/cve/cve-2009-0563/Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2009-1123/https://0daynews.com/cve/cve-2009-1123/The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2009-1537/https://0daynews.com/cve/cve-2009-1537/Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2009-3129/https://0daynews.com/cve/cve-2009-3129/Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2010-0232/https://0daynews.com/cve/cve-2010-0232/The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2010-0249/https://0daynews.com/cve/cve-2010-0249/Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2010-0806/https://0daynews.com/cve/cve-2010-0806/Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2010-2568/https://0daynews.com/cve/cve-2010-2568/Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2010-2572/https://0daynews.com/cve/cve-2010-2572/Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2010-3333/https://0daynews.com/cve/cve-2010-3333/A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2010-3962/https://0daynews.com/cve/cve-2010-3962/Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2010-4398/https://0daynews.com/cve/cve-2010-4398/Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2011-1889/https://0daynews.com/cve/cve-2011-1889/A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2011-2005/https://0daynews.com/cve/cve-2011-2005/afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2011-3402/https://0daynews.com/cve/cve-2011-3402/Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2012-0151/https://0daynews.com/cve/cve-2012-0151/The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2012-0158/https://0daynews.com/cve/cve-2012-0158/Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2012-1854/https://0daynews.com/cve/cve-2012-1854/Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2012-1856/https://0daynews.com/cve/cve-2012-1856/The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2012-1889/https://0daynews.com/cve/cve-2012-1889/Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2012-2539/https://0daynews.com/cve/cve-2012-2539/Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2012-4792/https://0daynews.com/cve/cve-2012-4792/Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2012-4969/https://0daynews.com/cve/cve-2012-4969/Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-0074/https://0daynews.com/cve/cve-2013-0074/Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-1331/https://0daynews.com/cve/cve-2013-1331/Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-1347/https://0daynews.com/cve/cve-2013-1347/This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-2551/https://0daynews.com/cve/cve-2013-2551/Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-3163/https://0daynews.com/cve/cve-2013-3163/Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-3660/https://0daynews.com/cve/cve-2013-3660/The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-3893/https://0daynews.com/cve/cve-2013-3893/Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-3896/https://0daynews.com/cve/cve-2013-3896/Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2013-3897/https://0daynews.com/cve/cve-2013-3897/A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-3900/https://0daynews.com/cve/cve-2013-3900/A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2013-3906/https://0daynews.com/cve/cve-2013-3906/Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-3918/https://0daynews.com/cve/cve-2013-3918/Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-5065/https://0daynews.com/cve/cve-2013-5065/Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2013-7331/https://0daynews.com/cve/cve-2013-7331/An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2014-0322/https://0daynews.com/cve/cve-2014-0322/Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-1761/https://0daynews.com/cve/cve-2014-1761/Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-1776/https://0daynews.com/cve/cve-2014-1776/Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2014-1812/https://0daynews.com/cve/cve-2014-1812/Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-2817/https://0daynews.com/cve/cve-2014-2817/Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-4077/https://0daynews.com/cve/cve-2014-4077/Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-4113/https://0daynews.com/cve/cve-2014-4113/Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-4114/https://0daynews.com/cve/cve-2014-4114/A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-4123/https://0daynews.com/cve/cve-2014-4123/Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-4148/https://0daynews.com/cve/cve-2014-4148/A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-6324/https://0daynews.com/cve/cve-2014-6324/The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-6332/https://0daynews.com/cve/cve-2014-6332/OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2014-6352/https://0daynews.com/cve/cve-2014-6352/Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-0016/https://0daynews.com/cve/cve-2015-0016/Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-0071/https://0daynews.com/cve/cve-2015-0071/Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2015-1635/https://0daynews.com/cve/cve-2015-1635/Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2015-1641/https://0daynews.com/cve/cve-2015-1641/Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-1642/https://0daynews.com/cve/cve-2015-1642/Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-1671/https://0daynews.com/cve/cve-2015-1671/A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-1701/https://0daynews.com/cve/cve-2015-1701/An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-1769/https://0daynews.com/cve/cve-2015-1769/A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2015-1770/https://0daynews.com/cve/cve-2015-1770/Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-2360/https://0daynews.com/cve/cve-2015-2360/Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-2387/https://0daynews.com/cve/cve-2015-2387/ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-2419/https://0daynews.com/cve/cve-2015-2419/JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-2424/https://0daynews.com/cve/cve-2015-2424/Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-2425/https://0daynews.com/cve/cve-2015-2425/Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-2426/https://0daynews.com/cve/cve-2015-2426/A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-2502/https://0daynews.com/cve/cve-2015-2502/Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-2545/https://0daynews.com/cve/cve-2015-2545/Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-2546/https://0daynews.com/cve/cve-2015-2546/The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2015-6175/https://0daynews.com/cve/cve-2015-6175/The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-0034/https://0daynews.com/cve/cve-2016-0034/Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-0040/https://0daynews.com/cve/cve-2016-0040/The kernel in Microsoft Windows allows local users to gain privileges via a crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-0099/https://0daynews.com/cve/cve-2016-0099/A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-0151/https://0daynews.com/cve/cve-2016-0151/The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-0162/https://0daynews.com/cve/cve-2016-0162/An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2016-0165/https://0daynews.com/cve/cve-2016-0165/Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-0167/https://0daynews.com/cve/cve-2016-0167/Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted applicationFri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-0185/https://0daynews.com/cve/cve-2016-0185/Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-0189/https://0daynews.com/cve/cve-2016-0189/The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-3235/https://0daynews.com/cve/cve-2016-3235/Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-3298/https://0daynews.com/cve/cve-2016-3298/An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2016-3309/https://0daynews.com/cve/cve-2016-3309/A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-3351/https://0daynews.com/cve/cve-2016-3351/An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2016-3393/https://0daynews.com/cve/cve-2016-3393/A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-7193/https://0daynews.com/cve/cve-2016-7193/Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-7200/https://0daynews.com/cve/cve-2016-7200/The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-7201/https://0daynews.com/cve/cve-2016-7201/The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-7255/https://0daynews.com/cve/cve-2016-7255/Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-7256/https://0daynews.com/cve/cve-2016-7256/A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2016-7262/https://0daynews.com/cve/cve-2016-7262/A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0001/https://0daynews.com/cve/cve-2017-0001/The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privilegesFri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0005/https://0daynews.com/cve/cve-2017-0005/The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0022/https://0daynews.com/cve/cve-2017-0022/Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2017-0037/https://0daynews.com/cve/cve-2017-0037/Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0059/https://0daynews.com/cve/cve-2017-0059/Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2017-0101/https://0daynews.com/cve/cve-2017-0101/A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0143/https://0daynews.com/cve/cve-2017-0143/Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0144/https://0daynews.com/cve/cve-2017-0144/The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0145/https://0daynews.com/cve/cve-2017-0145/The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0146/https://0daynews.com/cve/cve-2017-0146/The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0147/https://0daynews.com/cve/cve-2017-0147/The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0148/https://0daynews.com/cve/cve-2017-0148/The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0149/https://0daynews.com/cve/cve-2017-0149/Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0199/https://0daynews.com/cve/cve-2017-0199/Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0210/https://0daynews.com/cve/cve-2017-0210/A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0213/https://0daynews.com/cve/cve-2017-0213/Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0222/https://0daynews.com/cve/cve-2017-0222/A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0261/https://0daynews.com/cve/cve-2017-0261/Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0262/https://0daynews.com/cve/cve-2017-0262/A remote code execution vulnerability exists in Microsoft Office.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-0263/https://0daynews.com/cve/cve-2017-0263/Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-11774/https://0daynews.com/cve/cve-2017-11774/Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitation allows an attacker to execute commands.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-11826/https://0daynews.com/cve/cve-2017-11826/A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-11882/https://0daynews.com/cve/cve-2017-11882/Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-7269/https://0daynews.com/cve/cve-2017-7269/Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with "If: <http://" in a PROPFIND request.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2017-8464/https://0daynews.com/cve/cve-2017-8464/Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK fileFri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-8540/https://0daynews.com/cve/cve-2017-8540/The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-8543/https://0daynews.com/cve/cve-2017-8543/Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2017-8570/https://0daynews.com/cve/cve-2017-8570/A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2017-8759/https://0daynews.com/cve/cve-2017-8759/Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take control of an affected system.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-0798/https://0daynews.com/cve/cve-2018-0798/Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-0802/https://0daynews.com/cve/cve-2018-0802/Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-0824/https://0daynews.com/cve/cve-2018-0824/Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8120/https://0daynews.com/cve/cve-2018-8120/A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8174/https://0daynews.com/cve/cve-2018-8174/A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8373/https://0daynews.com/cve/cve-2018-8373/A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8405/https://0daynews.com/cve/cve-2018-8405/An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8406/https://0daynews.com/cve/cve-2018-8406/An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8414/https://0daynews.com/cve/cve-2018-8414/A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8440/https://0daynews.com/cve/cve-2018-8440/An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8453/https://0daynews.com/cve/cve-2018-8453/Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8581/https://0daynews.com/cve/cve-2018-8581/A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8589/https://0daynews.com/cve/cve-2018-8589/A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8611/https://0daynews.com/cve/cve-2018-8611/A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8639/https://0daynews.com/cve/cve-2018-8639/Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2018-8653/https://0daynews.com/cve/cve-2018-8653/Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0541/https://0daynews.com/cve/cve-2019-0541/Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0543/https://0daynews.com/cve/cve-2019-0543/A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0604/https://0daynews.com/cve/cve-2019-0604/Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2019-0676/https://0daynews.com/cve/cve-2019-0676/An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2019-0703/https://0daynews.com/cve/cve-2019-0703/An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2019-0708/https://0daynews.com/cve/cve-2019-0708/Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2019-0752/https://0daynews.com/cve/cve-2019-0752/A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet ExplorerFri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0797/https://0daynews.com/cve/cve-2019-0797/Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0803/https://0daynews.com/cve/cve-2019-0803/Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0808/https://0daynews.com/cve/cve-2019-0808/Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0841/https://0daynews.com/cve/cve-2019-0841/A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0859/https://0daynews.com/cve/cve-2019-0859/Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0863/https://0daynews.com/cve/cve-2019-0863/Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0880/https://0daynews.com/cve/cve-2019-0880/A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-0903/https://0daynews.com/cve/cve-2019-0903/A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1064/https://0daynews.com/cve/cve-2019-1064/A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1069/https://0daynews.com/cve/cve-2019-1069/A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1129/https://0daynews.com/cve/cve-2019-1129/A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1130/https://0daynews.com/cve/cve-2019-1130/A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1132/https://0daynews.com/cve/cve-2019-1132/A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1214/https://0daynews.com/cve/cve-2019-1214/Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1215/https://0daynews.com/cve/cve-2019-1215/Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1253/https://0daynews.com/cve/cve-2019-1253/A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1297/https://0daynews.com/cve/cve-2019-1297/A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1315/https://0daynews.com/cve/cve-2019-1315/A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1322/https://0daynews.com/cve/cve-2019-1322/A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1367/https://0daynews.com/cve/cve-2019-1367/Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1385/https://0daynews.com/cve/cve-2019-1385/A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1388/https://0daynews.com/cve/cve-2019-1388/Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1405/https://0daynews.com/cve/cve-2019-1405/A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1429/https://0daynews.com/cve/cve-2019-1429/Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2019-1458/https://0daynews.com/cve/cve-2019-1458/A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0601/https://0daynews.com/cve/cve-2020-0601/Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. A successful exploit could also allow the attacker to conduct man-in-the-middle attacks and decrypt confidential information on user connections to the affected software. The vulnerability is also known under the moniker of CurveBall.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0618/https://0daynews.com/cve/cve-2020-0618/Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0638/https://0daynews.com/cve/cve-2020-0638/Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0646/https://0daynews.com/cve/cve-2020-0646/Microsoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2020-0674/https://0daynews.com/cve/cve-2020-0674/Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0683/https://0daynews.com/cve/cve-2020-0683/Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0688/https://0daynews.com/cve/cve-2020-0688/Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0787/https://0daynews.com/cve/cve-2020-0787/Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0796/https://0daynews.com/cve/cve-2020-0796/A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2020-0878/https://0daynews.com/cve/cve-2020-0878/Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2020-0938/https://0daynews.com/cve/cve-2020-0938/Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0968/https://0daynews.com/cve/cve-2020-0968/Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-0986/https://0daynews.com/cve/cve-2020-0986/Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-1020/https://0daynews.com/cve/cve-2020-1020/Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-1027/https://0daynews.com/cve/cve-2020-1027/An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-1040/https://0daynews.com/cve/cve-2020-1040/Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest operating system. Successful exploitation allows for remote code execution on the host operating system.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2020-1054/https://0daynews.com/cve/cve-2020-1054/Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-1147/https://0daynews.com/cve/cve-2020-1147/Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for deserialization of the XML content.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-1350/https://0daynews.com/cve/cve-2020-1350/Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2020-1380/https://0daynews.com/cve/cve-2020-1380/Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-1464/https://0daynews.com/cve/cve-2020-1464/Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-1472/https://0daynews.com/cve/cve-2020-1472/Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2020-17087/https://0daynews.com/cve/cve-2020-17087/Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2020-17144/https://0daynews.com/cve/cve-2020-17144/Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-1647/https://0daynews.com/cve/cve-2021-1647/Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-1675/https://0daynews.com/cve/cve-2021-1675/Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-1732/https://0daynews.com/cve/cve-2021-1732/Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-26411/https://0daynews.com/cve/cve-2021-26411/Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-26855/https://0daynews.com/cve/cve-2021-26855/A server-side request forgery vulnerability in Microsoft Exchange Server allows an unauthenticated attacker to send arbitrary HTTP requests and authenticate as the Exchange server. Chained with three additional Exchange vulnerabilities (CVE-2021-26857, CVE-2021-26858, CVE-2021-27065) it delivers full pre-authentication remote code execution — the "ProxyLogon" chain exploited at mass scale in early 2021.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2021-26857/https://0daynews.com/cve/cve-2021-26857/Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-26858/https://0daynews.com/cve/cve-2021-26858/Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-27059/https://0daynews.com/cve/cve-2021-27059/Microsoft Office contains an unspecified vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-27065/https://0daynews.com/cve/cve-2021-27065/Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-27085/https://0daynews.com/cve/cve-2021-27085/Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-28310/https://0daynews.com/cve/cve-2021-28310/Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-31166/https://0daynews.com/cve/cve-2021-31166/Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2021-31196/https://0daynews.com/cve/cve-2021-31196/Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-31199/https://0daynews.com/cve/cve-2021-31199/Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2021-31201/https://0daynews.com/cve/cve-2021-31201/Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2021-31207/https://0daynews.com/cve/cve-2021-31207/Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2021-31955/https://0daynews.com/cve/cve-2021-31955/Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2021-31956/https://0daynews.com/cve/cve-2021-31956/Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-31979/https://0daynews.com/cve/cve-2021-31979/Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-33739/https://0daynews.com/cve/cve-2021-33739/Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-33742/https://0daynews.com/cve/cve-2021-33742/Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-33766/https://0daynews.com/cve/cve-2021-33766/Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-33771/https://0daynews.com/cve/cve-2021-33771/Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-34448/https://0daynews.com/cve/cve-2021-34448/Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2021-34473/https://0daynews.com/cve/cve-2021-34473/Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2021-34484/https://0daynews.com/cve/cve-2021-34484/Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-34486/https://0daynews.com/cve/cve-2021-34486/Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-34523/https://0daynews.com/cve/cve-2021-34523/Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2021-34527/https://0daynews.com/cve/cve-2021-34527/A remote-code-execution vulnerability in the Windows Print Spooler service allows an authenticated attacker to run arbitrary code with SYSTEM privileges, or a domain-authenticated attacker to compromise a domain controller, by abusing the spooler's remote printer-driver installation functionality.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-36934/https://0daynews.com/cve/cve-2021-36934/If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-36942/https://0daynews.com/cve/cve-2021-36942/Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-36948/https://0daynews.com/cve/cve-2021-36948/Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-36955/https://0daynews.com/cve/cve-2021-36955/Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-38645/https://0daynews.com/cve/cve-2021-38645/Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-38646/https://0daynews.com/cve/cve-2021-38646/Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-38647/https://0daynews.com/cve/cve-2021-38647/Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2021-38648/https://0daynews.com/cve/cve-2021-38648/Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-38649/https://0daynews.com/cve/cve-2021-38649/Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-40444/https://0daynews.com/cve/cve-2021-40444/A remote-code-execution vulnerability in the MSHTML (Trident) browser engine component used by Microsoft Office allows an attacker to execute arbitrary code when a victim opens a specially crafted Office document — exploited in the wild as a zero-day before Microsoft's patch shipped.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-40449/https://0daynews.com/cve/cve-2021-40449/Unspecified vulnerability allows for an authenticated user to escalate privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-40450/https://0daynews.com/cve/cve-2021-40450/Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-41357/https://0daynews.com/cve/cve-2021-41357/Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-41379/https://0daynews.com/cve/cve-2021-41379/Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2021-42278/https://0daynews.com/cve/cve-2021-42278/Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-42287/https://0daynews.com/cve/cve-2021-42287/Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-42292/https://0daynews.com/cve/cve-2021-42292/A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-42321/https://0daynews.com/cve/cve-2021-42321/An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-43226/https://0daynews.com/cve/cve-2021-43226/Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2021-43890/https://0daynews.com/cve/cve-2021-43890/Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-21882/https://0daynews.com/cve/cve-2022-21882/Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-21919/https://0daynews.com/cve/cve-2022-21919/Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-21971/https://0daynews.com/cve/cve-2022-21971/Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-21999/https://0daynews.com/cve/cve-2022-21999/Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-22047/https://0daynews.com/cve/cve-2022-22047/Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-22718/https://0daynews.com/cve/cve-2022-22718/Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-24521/https://0daynews.com/cve/cve-2022-24521/Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-26904/https://0daynews.com/cve/cve-2022-26904/Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-26923/https://0daynews.com/cve/cve-2022-26923/An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-26925/https://0daynews.com/cve/cve-2022-26925/Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-30190/https://0daynews.com/cve/cve-2022-30190/A remote-code-execution vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT) allows an attacker to execute arbitrary code when a malicious Office document is opened — triggered via a remote template reference that invokes MSDT through the ms-msdt URI scheme, without requiring macros.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-34713/https://0daynews.com/cve/cve-2022-34713/A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-37969/https://0daynews.com/cve/cve-2022-37969/Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-38028/https://0daynews.com/cve/cve-2022-38028/Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-41033/https://0daynews.com/cve/cve-2022-41033/Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-41040/https://0daynews.com/cve/cve-2022-41040/Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-41049/https://0daynews.com/cve/cve-2022-41049/Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2022-41073/https://0daynews.com/cve/cve-2022-41073/Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-41080/https://0daynews.com/cve/cve-2022-41080/Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-41082/https://0daynews.com/cve/cve-2022-41082/Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-41091/https://0daynews.com/cve/cve-2022-41091/Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2022-41125/https://0daynews.com/cve/cve-2022-41125/Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-41128/https://0daynews.com/cve/cve-2022-41128/Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2022-44698/https://0daynews.com/cve/cve-2022-44698/Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2023-21529/https://0daynews.com/cve/cve-2023-21529/Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-21674/https://0daynews.com/cve/cve-2023-21674/Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-21715/https://0daynews.com/cve/cve-2023-21715/Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-21823/https://0daynews.com/cve/cve-2023-21823/Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-23376/https://0daynews.com/cve/cve-2023-23376/Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-23397/https://0daynews.com/cve/cve-2023-23397/Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2023-24880/https://0daynews.com/cve/cve-2023-24880/Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2023-24955/https://0daynews.com/cve/cve-2023-24955/Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-28229/https://0daynews.com/cve/cve-2023-28229/Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-28252/https://0daynews.com/cve/cve-2023-28252/Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-29336/https://0daynews.com/cve/cve-2023-29336/Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-29357/https://0daynews.com/cve/cve-2023-29357/Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2023-29360/https://0daynews.com/cve/cve-2023-29360/Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-32046/https://0daynews.com/cve/cve-2023-32046/Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-32049/https://0daynews.com/cve/cve-2023-32049/Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-35311/https://0daynews.com/cve/cve-2023-35311/Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-36025/https://0daynews.com/cve/cve-2023-36025/Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-36033/https://0daynews.com/cve/cve-2023-36033/Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-36036/https://0daynews.com/cve/cve-2023-36036/Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-36424/https://0daynews.com/cve/cve-2023-36424/Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalationFri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-36563/https://0daynews.com/cve/cve-2023-36563/Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2023-36584/https://0daynews.com/cve/cve-2023-36584/Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2023-36761/https://0daynews.com/cve/cve-2023-36761/Microsoft Word contains an unspecified vulnerability that allows for information disclosure.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2023-36802/https://0daynews.com/cve/cve-2023-36802/Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-36874/https://0daynews.com/cve/cve-2023-36874/Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-36884/https://0daynews.com/cve/cve-2023-36884/Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-38180/https://0daynews.com/cve/cve-2023-38180/Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2023-41763/https://0daynews.com/cve/cve-2023-41763/Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2024-21338/https://0daynews.com/cve/cve-2024-21338/Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-21351/https://0daynews.com/cve/cve-2024-21351/Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-21410/https://0daynews.com/cve/cve-2024-21410/Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2024-21412/https://0daynews.com/cve/cve-2024-21412/Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-21413/https://0daynews.com/cve/cve-2024-21413/A vulnerability in how Microsoft Outlook processes specially crafted hyperlinks (the "MonikerLink" flaw) allows an attacker to bypass Outlook's Protected View and trigger remote code execution simply by having a user click a malicious link in an email.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2024-26169/https://0daynews.com/cve/cve-2024-26169/Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-29059/https://0daynews.com/cve/cve-2024-29059/Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-29988/https://0daynews.com/cve/cve-2024-29988/Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-30040/https://0daynews.com/cve/cve-2024-30040/Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-30051/https://0daynews.com/cve/cve-2024-30051/Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-30088/https://0daynews.com/cve/cve-2024-30088/Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-35250/https://0daynews.com/cve/cve-2024-35250/Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38014/https://0daynews.com/cve/cve-2024-38014/Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38080/https://0daynews.com/cve/cve-2024-38080/Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38094/https://0daynews.com/cve/cve-2024-38094/Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38106/https://0daynews.com/cve/cve-2024-38106/Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38107/https://0daynews.com/cve/cve-2024-38107/Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38112/https://0daynews.com/cve/cve-2024-38112/Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38178/https://0daynews.com/cve/cve-2024-38178/Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38189/https://0daynews.com/cve/cve-2024-38189/Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38193/https://0daynews.com/cve/cve-2024-38193/Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-38213/https://0daynews.com/cve/cve-2024-38213/Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2024-38217/https://0daynews.com/cve/cve-2024-38217/Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2024-38226/https://0daynews.com/cve/cve-2024-38226/Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-43451/https://0daynews.com/cve/cve-2024-43451/Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2024-43461/https://0daynews.com/cve/cve-2024-43461/Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-43468/https://0daynews.com/cve/cve-2024-43468/Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server and/or underlying database.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2024-43572/https://0daynews.com/cve/cve-2024-43572/Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-43573/https://0daynews.com/cve/cve-2024-43573/Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2024-49035/https://0daynews.com/cve/cve-2024-49035/Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-49039/https://0daynews.com/cve/cve-2024-49039/Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2024-49138/https://0daynews.com/cve/cve-2024-49138/Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-21333/https://0daynews.com/cve/cve-2025-21333/Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-21334/https://0daynews.com/cve/cve-2025-21334/Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-21335/https://0daynews.com/cve/cve-2025-21335/Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-21391/https://0daynews.com/cve/cve-2025-21391/Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-21418/https://0daynews.com/cve/cve-2025-21418/Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-24054/https://0daynews.com/cve/cve-2025-24054/Windows NTLM spoofing via external file path control lets a network attacker capture NTLM credential hashes without user interaction beyond browsing to a folder. CVSS 6.5. Patched March 2025.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2025-24983/https://0daynews.com/cve/cve-2025-24983/Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-24984/https://0daynews.com/cve/cve-2025-24984/Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2025-24985/https://0daynews.com/cve/cve-2025-24985/Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-24989/https://0daynews.com/cve/cve-2025-24989/Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-24990/https://0daynews.com/cve/cve-2025-24990/Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-24991/https://0daynews.com/cve/cve-2025-24991/Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2025-24993/https://0daynews.com/cve/cve-2025-24993/Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-26633/https://0daynews.com/cve/cve-2025-26633/Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-29824/https://0daynews.com/cve/cve-2025-29824/Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-30397/https://0daynews.com/cve/cve-2025-30397/Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-30400/https://0daynews.com/cve/cve-2025-30400/Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-32701/https://0daynews.com/cve/cve-2025-32701/Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-32706/https://0daynews.com/cve/cve-2025-32706/Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-32709/https://0daynews.com/cve/cve-2025-32709/Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-33053/https://0daynews.com/cve/cve-2025-33053/External control of file name or path in Windows Internet Shortcut Files lets a remote attacker execute code over a network without authentication. CVSS 8.8. Patched June 2025.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-33073/https://0daynews.com/cve/cve-2025-33073/Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-49704/https://0daynews.com/cve/cve-2025-49704/Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-49706/https://0daynews.com/cve/cve-2025-49706/Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2025-53770/https://0daynews.com/cve/cve-2025-53770/Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2025-59230/https://0daynews.com/cve/cve-2025-59230/Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-59287/https://0daynews.com/cve/cve-2025-59287/Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2025-60710/https://0daynews.com/cve/cve-2025-60710/Microsoft Windows contains a link following vulnerability that allows for privilege escalationFri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-62215/https://0daynews.com/cve/cve-2025-62215/Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2025-62221/https://0daynews.com/cve/cve-2025-62221/Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-20805/https://0daynews.com/cve/cve-2026-20805/Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2026-20963/https://0daynews.com/cve/cve-2026-20963/Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2026-21509/https://0daynews.com/cve/cve-2026-21509/Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-21510/https://0daynews.com/cve/cve-2026-21510/Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network. Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-21513/https://0daynews.com/cve/cve-2026-21513/Protection mechanism failure in Microsoft MSHTML lets unauthenticated attackers bypass a security feature over the network. CVSS 8.8, patched in Microsoft's February 2026 Patch Tuesday.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-21514/https://0daynews.com/cve/cve-2026-21514/Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-21519/https://0daynews.com/cve/cve-2026-21519/Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-21525/https://0daynews.com/cve/cve-2026-21525/Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2026-21533/https://0daynews.com/cve/cve-2026-21533/Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-32191/https://0daynews.com/cve/cve-2026-32191/Bing's crawler fetches attacker-hosted SVGs via imgurl and processes them as SYSTEM. CVE-2026-32191 (CVSS 9.8) is patched server-side by Microsoft.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2026-32194/https://0daynews.com/cve/cve-2026-32194/A crafted SVG submitted to Bing Images ran commands as SYSTEM on Microsoft's production image servers. CVE-2026-32194 (CVSS 9.8) is now patched.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2026-32201/https://0daynews.com/cve/cve-2026-32201/Network-reachable spoofing flaw in on-premises Microsoft SharePoint Server (Enterprise 2016, Server 2019, Subscription Edition). Patched by Microsoft in April 2026; on CISA KEV since 2026-04-14.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2026-32202/https://0daynews.com/cve/cve-2026-32202/Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2026-33825/https://0daynews.com/cve/cve-2026-33825/A local privilege escalation flaw in Microsoft Defender Antimalware Platform caused by insufficient access-control granularity. An authorized local attacker can elevate privileges. Patched in April 2026 Patch Tuesday, added to the CISA KEV catalog on 2026-04-22, and confirmed by CISA in July 2026 as weaponized in ransomware attacks. Disclosed as a zero-day by researcher "Chaotic Eclipse" (aka Nightmare-Eclipse) alongside two sibling flaws — RedSun and UnDefend — as a protest of Microsoft's disclosure coordination.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-41091/https://0daynews.com/cve/cve-2026-41091/Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-42897/https://0daynews.com/cve/cve-2026-42897/Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditions are met, arbitrary JavaScript can be executed in the browser context.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-45498/https://0daynews.com/cve/cve-2026-45498/Microsoft Defender contains an unspecified vulnerability that allows for denial of service.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2026-45659/https://0daynews.com/cve/cve-2026-45659/A high-severity deserialization-of-untrusted-data flaw in on-premises Microsoft SharePoint Server that leads to remote code execution. Patched by Microsoft in the May 2026 security update; added to the CISA Known Exploited Vulnerabilities catalog on July 2, 2026 after confirmed exploitation in the wild.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-50522/https://0daynews.com/cve/cve-2026-50522/Critical deserialization flaw in Microsoft Office SharePoint Server, CVSS 9.8, allowing an unauthenticated attacker to execute code over a network. Patched July 2026.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2026-50656/https://0daynews.com/cve/cve-2026-50656/Race-condition EoP in the Microsoft Malware Protection Engine (Defender) that lets a local user reach SYSTEM. Fixed in engine build 1.1.26060.3008. Public PoC.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-50661/https://0daynews.com/cve/cve-2026-50661/Publicly disclosed BitLocker Device Encryption bypass fixed in Microsoft's July 2026 Patch Tuesday. Requires physical access; no confirmed exploitation as of publication.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2026-55040/https://0daynews.com/cve/cve-2026-55040/Critical authentication bypass in Microsoft SharePoint Server's JWT validation pipeline. Half of a pre-auth RCE chain disclosed by Rapid7; patched in the July 2026 cumulative update.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2026-56155/https://0daynews.com/cve/cve-2026-56155/Active Directory Federation Services access-control granularity flaw lets an authorized attacker escalate privileges locally. Exploited in the wild; added to CISA KEV 2026-07-14.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/cve/cve-2026-56164/https://0daynews.com/cve/cve-2026-56164/SharePoint Server ships a critical function that's reachable without authentication, letting an unauthenticated attacker escalate over a network. Exploited in the wild; added to CISA KEV 2026-07-14.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftmediumcvehttps://0daynews.com/cve/cve-2026-58644/https://0daynews.com/cve/cve-2026-58644/A critical unauthenticated deserialization RCE in on-prem Microsoft Office SharePoint (CVE-2026-58644, CVSS 9.8). Patched July 14 in Microsoft's July 2026 updates; added to CISA KEV on July 16.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2026-62815/https://0daynews.com/cve/cve-2026-62815/Unauthenticated RCE in Microsoft QUIC. No user interaction required; any Windows service exposing QUIC can be exploited remotely with no prior access.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2026-62878/https://0daynews.com/cve/cve-2026-62878/Stack-based buffer overflow in Windows DNS Server enables unauthenticated remote code execution. Affects Windows Server 2012 through 2025.Fri, 14 Aug 2026 00:00:00 GMTMicrosoftcriticalcvehttps://0daynews.com/cve/cve-2026-68820/https://0daynews.com/cve/cve-2026-68820/Use-after-free in Windows Ancillary Function Driver for WinSock (afd.sys) lets local attackers gain SYSTEM privileges via race condition. Actively exploited by Lazarus.Fri, 14 Aug 2026 00:00:00 GMTMicrosofthighcvehttps://0daynews.com/articles/2026-08-13-sharepoint-cve-2026-55040-active-exploitation-poc/https://0daynews.com/articles/2026-08-13-sharepoint-cve-2026-55040-active-exploitation-poc/Rapid7's 30-day embargo on CVE-2026-55040 has expired. A public PoC is circulating and active exploitation is confirmed. The July 2026 CU patches it. Apply it now.Thu, 13 Aug 2026 08:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-08-12-lazarus-cve-2026-68820-operation-dream-job-cisa-kev/https://0daynews.com/articles/2026-08-12-lazarus-cve-2026-68820-operation-dream-job-cisa-kev/Lazarus exploited a Windows zero-day in afd.sys targeting defense firms via Operation Dream Job. CISA issued a two-week federal patch mandate.Wed, 12 Aug 2026 18:30:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-08-12-shieldbreak-defender-cve-2026-50656-patch-bypass/https://0daynews.com/articles/2026-08-12-shieldbreak-defender-cve-2026-50656-patch-bypass/ShieldBreak PoC, released hours after Patch Tuesday, claims to bypass the CVE-2026-50656 Defender fix and achieve SYSTEM access on patched systems.Wed, 12 Aug 2026 17:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-08-11-microsoft-patch-tuesday-august-2026/https://0daynews.com/articles/2026-08-11-microsoft-patch-tuesday-august-2026/Microsoft's August Patch Tuesday hits 400+ flaws. One is actively exploited by Lazarus via afd.sys. Two more are publicly disclosed. Here's your triage stack.Tue, 11 Aug 2026 20:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-08-11-sharepoint-cve-2026-45659-ransomware-confirmed/https://0daynews.com/articles/2026-08-11-sharepoint-cve-2026-45659-ransomware-confirmed/CISA confirms ransomware gangs are exploiting CVE-2026-45659, the SharePoint deserialization RCE on KEV since July. Patch the May update now.Tue, 11 Aug 2026 14:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-30-copilot-word-prompt-injection-propagation/https://0daynews.com/articles/2026-07-30-copilot-word-prompt-injection-propagation/Hidden instructions in Word docs can make M365 Copilot falsify figures and embed the attack in output files, which then fire again in the next Copilot session. No patch announced.Thu, 30 Jul 2026 14:30:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-30-void-blizzard-owa-credential-rotation/https://0daynews.com/articles/2026-07-30-void-blizzard-owa-credential-rotation/Updated: OWAReaper maintains Exchange mailbox access after credential rotation. Targeted sectors confirmed: US and EU government, telecom, finance, aerospace.Thu, 30 Jul 2026 11:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-29-void-blizzard-exchange-owa-owareaper-zero-day/https://0daynews.com/articles/2026-07-29-void-blizzard-exchange-owa-owareaper-zero-day/Russia-linked Laundry Bear is exploiting an Exchange OWA zero-day to install OWAReaper, a backdoor giving attackers persistent access to victim mailboxes.Wed, 29 Jul 2026 23:44:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-28-microsoft-mai-cyber-1-flash-mdash-security-ai/https://0daynews.com/articles/2026-07-28-microsoft-mai-cyber-1-flash-mdash-security-ai/MAI-Cyber-1-Flash, Microsoft's first cybersecurity-specific model, joins MDASH and scores 95.95% on CyberGym at 50% lower cost than the previous config.Tue, 28 Jul 2026 07:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-27-certighost-poc-adcs-windows-domain-takeover/https://0daynews.com/articles/2026-07-27-certighost-poc-adcs-windows-domain-takeover/PoC for Certighost, a Windows AD Certificate Services flaw, is now public. Authenticated attackers can use it to hijack a Windows domain.Mon, 27 Jul 2026 23:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-26-hotel-wifi-dns-hijack-m365-credential-theft/https://0daynews.com/articles/2026-07-26-hotel-wifi-dns-hijack-m365-credential-theft/Attackers are reconfiguring DNS on hotel Wi-Fi devices to redirect guests to fake Microsoft 365 login pages and harvest corporate credentials.Sun, 26 Jul 2026 03:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-25-bing-images-cve-2026-32194-32191-svg-system-rce/https://0daynews.com/articles/2026-07-25-bing-images-cve-2026-32194-32191-svg-system-rce/Microsoft patched two critical CVEs after XBOW found Bing's image processing ran arbitrary commands as NT AUTHORITY\SYSTEM on crafted SVG input.Sat, 25 Jul 2026 21:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-25-certighost-ad-cs-domain-controller-exploit/https://0daynews.com/articles/2026-07-25-certighost-ad-cs-domain-controller-exploit/Researchers published a working Certighost exploit: any AD user can obtain a Domain Controller certificate and run DCSync to extract the krbtgt hash. No CVE assigned.Sat, 25 Jul 2026 21:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-24-microsoft-365-outage-maintenance-bug-root-cause/https://0daynews.com/articles/2026-07-24-microsoft-365-outage-maintenance-bug-root-cause/Microsoft traced the July 23 M365 outage to a bug in its automated maintenance system that removed IP routes from more network devices than intended, taking down Azure and M365.Sat, 25 Jul 2026 01:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-24-certighost-ad-dc-certificate-dcsync/https://0daynews.com/articles/2026-07-24-certighost-ad-dc-certificate-dcsync/Certighost gives any low-privileged Active Directory user a path to DCSync: obtain a DC certificate, authenticate as the DC, pull the krbtgt hash.Fri, 24 Jul 2026 14:20:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-24-bing-svg-cve-2026-32194-system-rce-xbow/https://0daynews.com/articles/2026-07-24-bing-svg-cve-2026-32194-system-rce-xbow/A crafted SVG submitted to Bing Images ran commands as SYSTEM on Microsoft's production image servers. CVE-2026-32194 (CVSS 9.8) is now patched.Fri, 24 Jul 2026 14:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-24-microsoft-365-outage-teams-sharepoint-admin-center/https://0daynews.com/articles/2026-07-24-microsoft-365-outage-teams-sharepoint-admin-center/Microsoft 365 outage July 23 took Teams, SharePoint, and the M365 Admin Center offline, stranding security teams without their primary management console.Fri, 24 Jul 2026 07:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-23-exchange-online-mailbox-quarantine-error-airgap/https://0daynews.com/articles/2026-07-23-exchange-online-mailbox-quarantine-error-airgap/Microsoft is investigating an Exchange Online incident that has incorrectly quarantined customer mailboxes since July 20. No ETA on resolution as of July 23.Thu, 23 Jul 2026 10:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-22-sharepoint-cve-2026-50522-kev-machine-keys-fuse/https://0daynews.com/articles/2026-07-22-sharepoint-cve-2026-50522-kev-machine-keys-fuse/CVE-2026-50522 hits CISA KEV as attackers exploit the critical SharePoint RCE to steal ASP.NET machine keys and maintain access post-patch.Wed, 22 Jul 2026 23:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-22-microsoft-exchange-2016-2019-esu-ends-october/https://0daynews.com/articles/2026-07-22-microsoft-exchange-2016-2019-esu-ends-october/Microsoft cuts Exchange 2016 and 2019 ESU support in October 2026—no more security patches after that. Organizations on these versions have roughly 90 days to migrate or accept the risk.Wed, 22 Jul 2026 16:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-22-azure-devops-mcp-manifold-hidden-pr-comments-hijack-ai-reviewers-fuse/https://0daynews.com/articles/2026-07-22-azure-devops-mcp-manifold-hidden-pr-comments-hijack-ai-reviewers-fuse/Manifold Security disclosed a prompt-injection flaw in Microsoft's official Azure DevOps MCP server. Hidden PR comments hijack the reviewer's AI. No fix.Wed, 22 Jul 2026 09:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-21-sharepoint-cve-2026-50522-machine-keys-stolen-rotate-credentials-fuse/https://0daynews.com/articles/2026-07-21-sharepoint-cve-2026-50522-machine-keys-stolen-rotate-credentials-fuse/watchTowr says attackers exploiting CVE-2026-50522 are stealing SharePoint machine keys for post-patch persistence. Rotate credentials — patching alone won't help.Tue, 21 Jul 2026 22:05:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-21-watchtowr-sharepoint-cve-2026-50522-devcore-third-july-patch-active-exploitation/https://0daynews.com/articles/2026-07-21-watchtowr-sharepoint-cve-2026-50522-devcore-third-july-patch-active-exploitation/watchTowr confirms active exploitation of CVE-2026-50522, the third SharePoint Server RCE patched by Microsoft in July, one week after a public PoC dropped.Tue, 21 Jul 2026 17:30:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-21-microsoft-wsus-manual-fix-susdb-cleanup-maxxml-reindex-iisreset/https://0daynews.com/articles/2026-07-21-microsoft-wsus-manual-fix-susdb-cleanup-maxxml-reindex-iisreset/Microsoft published the WSUS unstick procedure Monday: back up SUSDB, run the cleanup query, restore MaxXMLPerRequest, reindex, wizard, IISReset.Tue, 21 Jul 2026 10:30:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-21-acros-0patch-legacyhive-free-micropatches-windows-10-server-2019/https://0daynews.com/articles/2026-07-21-acros-0patch-legacyhive-free-micropatches-windows-10-server-2019/ACROS Security (0patch) shipped free micropatches for the unpatched LegacyHive LPE — Windows 10 2004 and Server 2019 up. Microsoft is still investigating.Tue, 21 Jul 2026 09:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-20-wsus-sync-fix-new-installs-only-old-servers-metadata-cleanup/https://0daynews.com/articles/2026-07-20-wsus-sync-fix-new-installs-only-old-servers-metadata-cleanup/WSUS servers on Windows Server 2012+ have failed to sync since roughly July 13. Microsoft's July 18 mitigation restores fresh installs; older ones wait on a metadata cleanup step.Mon, 20 Jul 2026 13:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-20-microsoft-kb5121767-oob-dell-intel-ipf-driver-hold-fix/https://0daynews.com/articles/2026-07-20-microsoft-kb5121767-oob-dell-intel-ipf-driver-hold-fix/Microsoft shipped KB5121767 on 2026-07-20 to patch the Intel IPF driver incompatibility stranding a subset of Dell PCs off July's Windows 11 security update.Mon, 20 Jul 2026 11:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-19-legacyhive-nightmare-eclipse-windows-user-profile-usrclass-lpe-unpatched/https://0daynews.com/articles/2026-07-19-legacyhive-nightmare-eclipse-windows-user-profile-usrclass-lpe-unpatched/A researcher publishing as "Nightmare Eclipse" dropped a PoC for LegacyHive — an unpatched local privilege escalation in Windows' User Profile Service.Sun, 19 Jul 2026 06:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-17-nightmare-eclipse-legacyhive-windows-user-profile-service-lpe-zero-day/https://0daynews.com/articles/2026-07-17-nightmare-eclipse-legacyhive-windows-user-profile-service-lpe-zero-day/Researcher Nightmare Eclipse dropped LegacyHive — an unpatched Windows User Profile Service LPE — hours after July Patch Tuesday. No CVE, PoC on GitHub.Fri, 17 Jul 2026 13:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-17-microsoft-windows-server-2022-mainstream-eos-october-13-extended-2031/https://0daynews.com/articles/2026-07-17-microsoft-windows-server-2022-mainstream-eos-october-13-extended-2031/Microsoft's Windows Server 2022 leaves mainstream support October 13, 2026 — but extended support runs five more years with security updates at no extra cost.Fri, 17 Jul 2026 10:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-16-microsoft-windows-11-24h2-home-pro-eos-october-13-25h2-enablement/https://0daynews.com/articles/2026-07-16-microsoft-windows-11-24h2-home-pro-eos-october-13-25h2-enablement/Microsoft has set October 13, 2026 as the last patch day for Windows 11 24H2 Home and Pro. Enterprise and Education get one more year — the usual split.Fri, 17 Jul 2026 01:30:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-16-cisa-kev-sharepoint-cve-2026-58644-deserialization-fourth-in-week/https://0daynews.com/articles/2026-07-16-cisa-kev-sharepoint-cve-2026-58644-deserialization-fourth-in-week/CVE-2026-58644 — an unauthenticated deserialization RCE, CVSS 9.8 — landed on CISA KEV this morning, two days after Microsoft shipped the SharePoint fix.Thu, 16 Jul 2026 21:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-16-microsoft-mdash-july-622-cves-ai-attribution-krebs-rapid7/https://0daynews.com/articles/2026-07-16-microsoft-mdash-july-622-cves-ai-attribution-krebs-rapid7/Microsoft credited AI discovery for July's record 622-CVE Patch Tuesday. That's the second half of the story the MDASH post previewed a week earlier.Thu, 16 Jul 2026 08:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-16-microsoft-kb5099539-windows-10-esu-july-22h2-ltsc-2021/https://0daynews.com/articles/2026-07-16-microsoft-kb5099539-windows-10-esu-july-22h2-ltsc-2021/Microsoft's KB5099539 delivers July's Patch Tuesday to Windows 10 22H2 and LTSC 2021 fleets, including two exploited zero-days. Enrollment required.Thu, 16 Jul 2026 07:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-15-chaotic-eclipse-legacyhive-profsvc-lpe-poc-drop/https://0daynews.com/articles/2026-07-15-chaotic-eclipse-legacyhive-profsvc-lpe-poc-drop/Researcher 'Chaotic Eclipse' released LegacyHive, a Windows User Profile Service arbitrary-hive-load LPE PoC, hours after July Patch Tuesday. Unpatched.Wed, 15 Jul 2026 16:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-15-cisa-sharepoint-three-cves-bod-26-04-july-17-deadline/https://0daynews.com/articles/2026-07-15-cisa-sharepoint-three-cves-bod-26-04-july-17-deadline/CISA named three actively exploited on-prem SharePoint CVEs and put a July 17 remediation clock on federal agencies. Shadowserver counts 800+ unpatched servers. Patch on one maintenance touch.Wed, 15 Jul 2026 14:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-15-microsoft-safeguard-hold-dell-kb5101650-intel-ipf-shutdowns/https://0daynews.com/articles/2026-07-15-microsoft-safeguard-hold-dell-kb5101650-intel-ipf-shutdowns/Microsoft applied a safeguard hold on July's KB5101650 for a limited set of Dell devices running Windows 11 25H2 and 24H2 after a June preview update triggered Intel IPF driver crashes, heat, and battery drain.Wed, 15 Jul 2026 10:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-15-microsoft-entra-id-passkeys-default-september-sms-voice-retirement-feb-2027/https://0daynews.com/articles/2026-07-15-microsoft-entra-id-passkeys-default-september-sms-voice-retirement-feb-2027/Microsoft is auto-enrolling Entra ID SMS/voice MFA users into passkeys starting September 2026 and retiring native SMS/voice delivery on Feb 1, 2027. What to do.Wed, 15 Jul 2026 08:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-14-rapid7-sharepoint-cve-2026-55040-jwt-auth-bypass-rce-chain-half/https://0daynews.com/articles/2026-07-14-rapid7-sharepoint-cve-2026-55040-jwt-auth-bypass-rce-chain-half/Rapid7 disclosed CVE-2026-55040 today — a SharePoint JWT auth bypass patched in July Patch Tuesday. Second half of a pre-auth RCE chain lands next month. Patch now.Tue, 14 Jul 2026 20:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-14-microsoft-july-patch-tuesday-570-cves-adfs-sharepoint-bitlocker-zero-days/https://0daynews.com/articles/2026-07-14-microsoft-july-patch-tuesday-570-cves-adfs-sharepoint-bitlocker-zero-days/Microsoft's July 2026 Patch Tuesday ships 570 CVEs, including two exploited zero-days in AD FS and SharePoint plus a publicly disclosed BitLocker bypass. Patch AD FS first.Tue, 14 Jul 2026 19:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-14-proofpoint-oauth-client-id-spoofing-entra-signin-logs-blind/https://0daynews.com/articles/2026-07-14-proofpoint-oauth-client-id-spoofing-entra-signin-logs-blind/Proofpoint tracked two credential-stuffing crews that submit fake OAuth application IDs to Entra ID's token endpoint. The sign-in logs don't record what defenders are looking for.Tue, 14 Jul 2026 15:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-14-eset-uefi-shim-cve-2026-8863-secure-boot-bypass/https://0daynews.com/articles/2026-07-14-eset-uefi-shim-cve-2026-8863-secure-boot-bypass/ESET's Martin Smolár found 11 old Microsoft-signed UEFI shims that still bypass Secure Boot — CVE-2026-8863, revoked via the June DBX update.Tue, 14 Jul 2026 14:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-10-microsoft-mdash-msrc-humans-downstream/https://0daynews.com/articles/2026-07-10-microsoft-mdash-msrc-humans-downstream/Microsoft says AI-found Windows bugs will make Patch Tuesdays bigger. The interesting part isn't the AI — it's the human queue that signs off on what ships.Fri, 10 Jul 2026 23:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-09-microsoft-mdash-ai-scanner-fatter-patch-tuesdays/https://0daynews.com/articles/2026-07-09-microsoft-mdash-ai-scanner-fatter-patch-tuesdays/Microsoft EVP Pavan Davuluri says a multi-model AI scanner called MDASH will surface more Windows bugs — expect higher-volume monthly releases.Thu, 09 Jul 2026 22:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-09-forg365-phaas-m365-aitm-device-code-zerobec/https://0daynews.com/articles/2026-07-09-forg365-phaas-m365-aitm-device-code-zerobec/ZeroBEC flagged a new phishing-as-a-service, Forg365, bundling AiTM proxying with OAuth device-code prompts and AI lures against Microsoft 365 accounts.Thu, 09 Jul 2026 16:00:01 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-09-microsoft-owa-light-retirement-exchange-server/https://0daynews.com/articles/2026-07-09-microsoft-owa-light-retirement-exchange-server/Microsoft is disabling OWA Light in an August 2026 Exchange Server update, ending a legacy client shipped when IE6 was current. Admins can disable it today.Thu, 09 Jul 2026 12:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-09-microsoft-defender-rogueplanet-cve-2026-50656-lpe-patch/https://0daynews.com/articles/2026-07-09-microsoft-defender-rogueplanet-cve-2026-50656-lpe-patch/Microsoft shipped an out-of-band Defender engine update for RoguePlanet (CVE-2026-50656), a race-condition LPE to SYSTEM. Public PoC. Verify auto-update landed.Thu, 09 Jul 2026 07:15:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-08-pink-o-unc-066-entra-passkey-vishing-okta-unit42/https://0daynews.com/articles/2026-07-08-pink-o-unc-066-entra-passkey-vishing-okta-unit42/Okta and Unit 42 attribute an ongoing vishing campaign — active since April — that walks Microsoft 365 users through enrolling a passkey the attacker controls.Wed, 08 Jul 2026 18:05:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-08-debull-m365-device-code-phishing-storm-2372-overlap/https://0daynews.com/articles/2026-07-08-debull-m365-device-code-phishing-storm-2372-overlap/ZeroBEC reports DEBULL — a device-code phishing kit repackaging Storm-2372 tradecraft — active against M365 tenants late June to early July. Block it.Wed, 08 Jul 2026 06:20:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-04-bluehammer-defender-lpe-kev-ransomware-confirmed/https://0daynews.com/articles/2026-07-04-bluehammer-defender-lpe-kev-ransomware-confirmed/CVE-2026-33825, the Microsoft Defender local privilege escalation disclosed as a zero-day by 'Chaotic Eclipse' in April, is confirmed weaponized in ransomware. Patched. Ransomware family unnamed.Sat, 04 Jul 2026 13:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-03-sharepoint-cve-2026-45659-kev-active-exploitation/https://0daynews.com/articles/2026-07-03-sharepoint-cve-2026-45659-kev-active-exploitation/CISA added CVE-2026-45659, a high-severity SharePoint Server deserialization RCE, to the Known Exploited Vulnerabilities catalog on July 2 after confirming active exploitation. Microsoft's May patch is your remediation.Fri, 03 Jul 2026 04:30:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-02-follina-msdt-zero-day-explained/https://0daynews.com/articles/2026-07-02-follina-msdt-zero-day-explained/CVE-2022-30190 let a Word document trigger arbitrary code execution through the Windows Support Diagnostic Tool — no macros, and in some configurations no explicit click required beyond opening the file.Thu, 02 Jul 2026 13:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-01-mshtml-office-zero-day-cve-2021-40444/https://0daynews.com/articles/2026-07-01-mshtml-office-zero-day-cve-2021-40444/CVE-2021-40444 let attackers execute arbitrary code through a malicious Office document with no macros required — exploited in the wild before Microsoft's patch existed.Wed, 01 Jul 2026 15:30:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-07-01-proxylogon-exchange-server-attack-chain/https://0daynews.com/articles/2026-07-01-proxylogon-exchange-server-attack-chain/CVE-2021-26855 and three chained Exchange Server bugs gave attackers unauthenticated remote code execution — and led to a compromise event so widespread the FBI obtained a court order to remove webshells itself.Wed, 01 Jul 2026 13:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-06-30-printnightmare-windows-print-spooler-explained/https://0daynews.com/articles/2026-06-30-printnightmare-windows-print-spooler-explained/CVE-2021-34527 let attackers turn the Windows Print Spooler service — running by default on nearly every Windows machine — into a path to SYSTEM privileges or full domain compromise.Tue, 30 Jun 2026 15:00:00 GMTMicrosoftarticlehttps://0daynews.com/articles/2026-06-28-outlook-monikerlink-rce-patch-tuesday-explainer/https://0daynews.com/articles/2026-06-28-outlook-monikerlink-rce-patch-tuesday-explainer/CVE-2024-21413 let attackers bypass Outlook's Protected View sandbox with a single specially crafted hyperlink, leading to code execution and potential credential leakage. Patched in February 2024's Patch Tuesday.Sun, 28 Jun 2026 13:00:00 GMTMicrosoftarticle