CVE-2026-47642 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-47642 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-47290

CVE-2026-47290 is a Microsoft Office remote-code-execution vulnerability described as a use-after-free in Office components. Affected software includes Microsoft Office family (Word, Excel, PowerPoint, SharePoint) with the Office ecosystem cited in NCsc advisories and CIRCL sighting logs. The CVS...

CVE-2026-54115 Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability

...

CVE-2026-50655

CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...

CVE-2026-50657

CVE-2026-50657 : Microsoft Defender for Mac/Endpoint information disclosure vulnerability that allows an authorized attacker to disclose private information locally. CVSS v3.1 base score 4.7 (Medium); attack vector LOCAL, no user interaction, high impact on confidentiality, requires low privilege...

CVE-2026-47295

CVE-2026-47295 describes an elevation-of-privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements used in SQL commands (SQL injection). The issue can be exploited by an authenticated attacker over a network to gain elevated privileges, with impact on c...

CVE-2026-47295 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-50458

CVE-2026-50458 is a use-after-free vulnerability in Microsoft Brokering File System that allows an authorized local attacker to elevate privileges. Exploitation details are not provided in the public text, but the NVD/CIRCL/ENISA references confirm local privilege escalation with a CVSS v3.1 base...

CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2026-50438

CVE-2026-50438 describes an elevation-of-privilege vulnerability in Microsoft PC Manager caused by improper link resolution before file access (link following). Reports from NVD, EUVD, CIRCL, MSRC, and CVE lists confirm the issue affects Microsoft PC Manager and enables an authorized local attack...

CVE-2026-50439 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

...

CVE-2026-50439

CVE-2026-50439 affects Microsoft Message Queuing Queue Manager. Description and connected records confirm a use-after-free vulnerability that allows an unauthenticated attacker to execute code remotely over a network. Impact is described as remote code execution with high-severity CVSS in public ...

CVE-2026-50439 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

...

CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-50466

CVE-2026-50466 is a local privilege escalation in the Windows Brokering File System caused by a use-after-free in the Windows Brokering File System component. Public documentation confirms that an authorized attacker could elevate privileges locally (CVSSv3.1 base score 7.8, LOCAL attack vector, ...