CVE-2026-40360 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2026-35440

CVE-2026-35440 affects Microsoft Word (Office) with an information-disclosure vulnerability where files or directories accessible to external parties enable a local attacker to disclose information. The CVSS vector indicates Local attack, Low attack complexity, No privileges required, and User In...

CVE-2026-35439 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-35439 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-35439

CVE-2026-35439 is a remote code execution vulnerability in Microsoft SharePoint Server caused by deserialization of untrusted data. An authorized attacker can exploit this over a network to execute code on affected systems. The CVE is associated with SharePoint Server (on‑premises) and the approv...

CVE-2026-35433

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally...

CVE-2026-34330

Technical details about CVE-2026-34330 (Win32K GRFX integer overflow leading to local privilege elevation) are not publicly provided in the supplied connected documents. Please monitor official advisories (MSRC/NVD) for affected products, impact, and fixes.

CVE-2026-34329 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

...

CVE-2026-34329 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

...

CVE-2026-34329

CVE-2026-34329 is a heap-based buffer overflow in Windows Message Queuing (MSMQ) that could allow an unauthenticated attacker to execute code over an adjacent network. Public details in provided connected documents describe MSMQ as affected and classify the vulnerability as remote code execution;...

CVE-2026-40379 Azure Entra ID Spoofing Vulnerability

...

CVE-2026-40379

CVE-2026-40379 is a Microsoft ESTS (Enterprise Security Token Service) spoofing vulnerability impacting Azure services. The connected sources confirm exposure of sensitive information to an unauthorized actor in Azure Entra ID and describe exploitation as network-based spoofing. The CVSS 3.1 scor...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Teams Spoofing Vulnerability

Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

Service Update 1.44 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

.NET 9.0 Update - May 12, 2026

None None...

Microsoft Data Formulator Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...