PT-2026-7363

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

Microsoft Azure Compute Gallery 安全漏洞

Microsoft Azure Compute Gallery is a service provided by Microsoft in the United States that manages virtual machines. There are security vulnerabilities in Microsoft Azure Compute Gallery. Attackers can exploit these vulnerabilities to obtain sensitive information...

Microsoft HTTP.sys 安全漏洞

Microsoft HTTP.SYS is an HTTP application protocol developed by Microsoft Corporation. There are security vulnerabilities in Microsoft HTTP.SYS. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are affected: Windows Server 2025 Server Core...

VulnCheck KEV: CVE-2026-21514

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...

KLA90875 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability...

KLA90878 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, spoof user interface, obtain sensitive information, cause denial of service. Below is a...

Microsoft Excel 缓冲区错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A buffer overflow vulnerability exists in Microsoft Excel. The vulnerability stems from the program's failure to properly validate the length and size of input data, which can be exploited by an attacker ...

Microsoft Azure IoT 安全漏洞

Microsoft Azure IoT is a central hosting service provided by the American company Microsoft. It is used for bidirectional communication between IoT applications and the devices they manage. There are security vulnerabilities in Microsoft Azure IoT. Attackers can exploit these vulnerabilities to...

Microsoft Graphics Component 资源管理错误漏洞

The Microsoft Graphics Component is a graphics driver component developed by Microsoft Corporation. There is a resource management vulnerability associated with the Microsoft Graphics Component. The following products and versions are affected: Windows 10 Version 1809 for 32-bit systems, Windows ...

Microsoft Hyper-V 缓冲区错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A buffer overflow vulnerability exists in Microsoft Hyper-V. The vulnerability stems from a failure to properly validate the length and size of...

Microsoft Hyper-V 访问控制错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An access control error vulnerability exists in Microsoft Hyper-V. The vulnerability stems from a flaw in the access control mechanism and can be...

PT-2026-7339

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A flaw exists in the Microsoft Graphics Component that could allow an attacker to gain higher-level permissions on a system. This issue involves a use-after-free conditio...

Security Updates for Microsoft Exchange Server (February 2026)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the February, 2026 security bulletin. - User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an...

Security Updates for Microsoft Word Products (February 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple spoofing vulnerabilities: - Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. CVE-2026-21511 - A spoofing...

Security Update for Microsoft .NET Core (February 2026)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - .NET Spoofing Vulnerability CVE-2026-21218 Note that Nessus has not tested for this issue but has instead relied only on the...

Microsoft GitHub Copilot for JetBrains 命令注入漏洞

Microsoft GitHub Copilot for JetBrains is an AI programming assistant plugin from Microsoft USA that can be installed in various IDEs produced by JetBrains. A command injection vulnerability exists in Microsoft GitHub Copilot for JetBrains. The vulnerability stems from the application failing to...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A resource management error vulnerability exists in Microsoft Windows. The vulnerability stems from uncontrolled resource consumption by an application and can be exploited by an...

KLA90876 ACE vulnerability in Microsoft Apps

A remote code execution vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2026-20841 Exploitation Public exploits exist for this vulnerability. Malware exists for this...

KLA90873 ACE vulnerability in Microsoft SQL Server

A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-21229 Exploitation Related products Microsoft-Power-BI CVE list CVE-2026-21229 critical Solution Install necessary update...

Microsoft HTTP.sys 安全漏洞

Microsoft HTTP.SYS is an HTTP application protocol developed by Microsoft Corporation. There are security vulnerabilities in Microsoft HTTP.SYS. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are affected: Windows 10 Version 21H2 for...