2360 matches found
August Microsoft Patch Tuesday
August Microsoft Patch Tuesday. A total of 401 vulnerabilities were addressed - 170 fewer than in July. One of the vulnerabilities is known to be actively exploited in the wild: 🔻 EoP - Windows Ancillary Function Driver for WinSock CVE-2026-68820. A local attacker can exploit this vulnerability t...
Patch Tuesday: Update now to fix 421 flaws, including three zero-days
Microsoft’s August 2026 Patch Tuesday addresses 421 Microsoft vulnerabilities, including 62 rated Critical. One Windows vulnerability has been exploited in the wild by the Lazarus group to gain SYSTEM privileges. The August update is smaller than July’s record-breaking release, but it's still amo...
Vulnerabilities in Microsoft Windows
Microsoft has fixed a large number of vulnerabilities in Windows. An attacker could exploit these vulnerabilities to carry out attacks that could result in the following types of damage, as listed in the table below. The most severe vulnerabilities are identified by the following CVE numbers:...
CVE-2026-65797
CVE-2026-65797 involves a numeric truncation error in Windows DNS that can allow an authorized attacker to elevate privileges locally. The available documents confirm the affected component as Windows DNS and the root cause as a numeric truncation flaw. The impact is local privilege escalation wi...
CVE-2026-65799
CVE-2026-65799 is an integer overflow or wraparound vulnerability in the Windows DNS service that allows an authorized local attacker to elevate privileges . The FSTEC BDU further characterizes the root cause as a buffer overflow in dynamic memory . Microsoft rates it CVSS 6.7 (MEDIUM) with high ...
CVE-2026-62883 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-62778 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-61920
CVE-2026-61920 – Windows DNS Server : A race condition caused by improper synchronization on a shared resource enables an authorized attacker to execute code over a network. Affected product: Windows DNS Server. Root cause: concurrent execution due to lack of proper synchronization in the shared ...
CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-65789
CVE-2026-65789 corresponds to a Windows DNS Server use-after-free vulnerability that enables remote code execution over a network. Based on the connected documents, the vulnerability is described as a use-after-free in Windows DNS which can allow an unauthorized attacker to execute code remotely....
CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-62878
CVE-2026-62878 is a Windows DNS Server remote code execution vulnerability caused by a stack-based buffer overflow. The NVD entry indicates a network-based exploit with a critical CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact is the ability for an unauthenticated, remo...