February 10, 2026—KB5075971 (Monthly Rollup)

None None...

February 10, 2026—KB5075970 (Monthly Rollup)

None None...

CVE-2026-24302

Azure Arc Elevation of Privilege Vulnerability...

EUVD-2026-5522

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-24302

Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-24302

CVE-2026-24302 is an Elevation of Privilege issue in Microsoft Azure Arc caused by improper access control. An authenticated attacker could exploit a network path to elevate privileges; CVSS 3.1 vectors show network access, no user interaction, high to critical impact. Microsoft/Microsoft-affilia...

CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-24302

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability

...

Azure Arc Elevation of Privilege Vulnerability

Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

PT-2026-6638

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An elevation of privilege issue exists in Azure Arc. Successful exploitation could allow an attacker to gain elevated privileges. Recommendations At the moment, there is no information abou...

Microsoft Azure Arc 访问控制错误漏洞

Microsoft Azure Arc is a storage system from Microsoft USA. that extends the Azure platform into your environment. Microsoft Azure Arc has an Access Control Error vulnerability that can be exploited by an attacker to elevate privileges...

January 13, 2026—KB5073696 (Monthly Rollup)

None None...

January 13, 2026—KB5073698 (Monthly Rollup)

None None...

CVE-2023-25952

Out-of-bounds write in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-29165

Unquoted search path or element in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Potential Undefined Behaviors in `Arc<T>`/`Rc<T>` impls of `from_value` on OOM

The SharedPointer::alloc implementation for sync::Arc and rc::Rc in rkyv/src/impls/alloc/rc/atomic.rs and rc.rs does not check if the allocator returns a null pointer on OOM Out of Memory. This null pointer can flow through to SharedPointer::fromvalue, which calls Box::fromrawptr with the null...

RUSTSEC-2026-0001 Potential Undefined Behaviors in `Arc<T>`/`Rc<T>` impls of `from_value` on OOM

The SharedPointer::alloc implementation for sync::Arc and rc::Rc in rkyv/src/impls/alloc/rc/atomic.rs and rc.rs does not check if the allocator returns a null pointer on OOM Out of Memory. This null pointer can flow through to SharedPointer::fromvalue, which calls Box::fromrawptr with the null...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993243)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993243 advisory. In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dmamapsingle/dmaunmapsingle The ndev-dev and pdev-dev aren't the sam...

CVE-2025-14812 Address bar spoofing risk in Arc Search on iOS

ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk...