KLA91088 Multiple vulnerabilities in Microsoft Apps

🗓️ 09 Jun 2026 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 2 Views

Multiple vulnerabilities in Microsoft Apps allow remote code execution and privilege gain.

Reporter	Title	Published	Views	Family All 126
attackerkb	CVE-2026-44803	9 Jun 202617:06	–	attackerkb
attackerkb	CVE-2026-50512	9 Jun 202617:36	–	attackerkb
attackerkb	CVE-2026-45649	9 Jun 202617:04	–	attackerkb
attackerkb	CVE-2026-44812	9 Jun 202617:06	–	attackerkb
BDU FSTEC	The vulnerability of the Windows Graphics Component, which allows a hacker to execute arbitrary code on Windows operating systems	15 Jun 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Graphics Component, which allows a hacker to execute arbitrary code on Windows operating systems	15 Jun 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editor and Microsoft Excel spreadsheet editors on Android operating systems, related to lack of access control, allows attackers to perform spear-phishing attacks.	17 Jun 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Bing Search’s search system on Android operating systems, related to information representation errors in the user interface, allows attackers to perform spearishing attacks.	17 Jun 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft PowerToys system utilities, related to authentication errors, allows a perpetrator to escalate their privileges.	17 Jun 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations lies in the absence of an authentication process that would allow a malicious individual to escalate their privileges.	22 Jun 202600:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42902
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44803
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44812
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45649
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45650
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49161
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50511
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50512
threats	www.threats.kaspersky.com/en/class/Exploit/
statistics	www.statistics.securelist.com/

30 Jul 2026 00:00Current

7High risk

Vulners AI Score7

CVSS 3.17.8

EPSS0.00704

SSVC

Microsoft Apps remote code execution privilege escalation security feature bypass user interface spoofing