CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

...

CVE-2026-55004

CVE-2026-55004 corresponds to a local privilege-elevation flaw described as a double-free in Microsoft Printer Drivers. The CVSSv3.1 score is 7.8 (High) with local attack vector, low attack complexity, and privileges required, no user interaction, impacting confidentiality, integrity, and availab...

CVE-2026-54993 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-49166

CVE-2026-49166: Use-after-free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. Affected component is Microsoft Printer Drivers; root cause is a use-after-free condition. Exploitation status is not detailed in the provided documents. Base CVSS v3.1 score i...

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-49162

CVE-2026-49162 is a use-after-free in Microsoft Brokering File System leading to local privilege escalation for an authenticated user; CVSSv3.1 indicates high impact (C/H, I/H, A/H) with local exploit required and low privileges. Public details in the connected documents do not specify affected p...

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-48561

Improper neutralization of special elements used in a command 'command injection' in Copilot Chat Microsoft Edge allows an unauthorized attacker to execute code over a network...

CVE-2026-48561 Microsoft Edge Copilot Remote Code Execution Vulnerability

...

CVE-2026-48561 Microsoft Edge Copilot Remote Code Execution Vulnerability

...

CVE-2026-48561

CVE-2026-48561 concerns Microsoft Copilot and is described as an Improper neutralization of special elements used in a command (command injection) that allows remote code execution over a network. The CVSS 3.1 metrics from the source indicate a CRITICAL base score of 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/...

Security update 2026-07-14

...

KB5102338 - Description of the security update for SQL Server 2017 GDR: July 14, 2026

None None...

KB5101346 - Description of the security update for SQL Server 2025 CU6: July 14, 2026

None None...

KB5102335 - Description of the security update for SQL Server 2019 CU32: July 14, 2026

None None...

July 14, 2026—KB5099538 (OS Build 17763.9020)

None None...

Windows Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...