Výsledky hledání

CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-70337 Microsoft US

11. 8. 16:00 · Microsoft Security · CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability

CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

EPSS 0.00 CVE-2026-63513 Microsoft US

11. 8. 16:00 · Microsoft Security · CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability

CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

EPSS 0.00 CVE-2026-63519 Microsoft US

11. 8. 16:00 · Microsoft Security · CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability

CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

EPSS 0.00 CVE-2026-66807 Microsoft US

11. 8. 16:00 · Microsoft Security · CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability

Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants

Overview of the attack In July 2026, Kaspersky experts detected a new attack by the Head Mare group. Previously, we classified them as hacktivists, but now we define them as an APT group due to the sophistication of their TTPs and the absence of destructive activity (encryption, wiping) in the targeted infrastructures. In this latest campaign, the attackers exploited a chain of vulnerabilities in the TrueConf video conferencing server and replaced the original TrueConf client installers with…

TrueConf Kaspersky Microsoft energetika výroba a průmysl doprava telekomunikace RU

11. 8. 14:00 · Securelist (Kaspersky) · Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants

Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

Project CAV3RN is a modular espionage framework used against targets in Israel. This report expands on two earlier publications: the first was published in June 2026 as part of our Kaspersky Threat Intelligence Reporting service, and the second was published on Securelist the following month, further documenting the framework’s evolving architecture and C2 capabilities. Continued tracking of this cluster in early August 2026 uncovered several previously undocumented components that expanded the…

Microsoft Google obrana RU

11. 8. 12:00 · Securelist (Kaspersky) · Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise 

Security teams are being asked to defend a growing attack surface with fewer people and around the clock, against threat actors who never take a night off. As cyberattackers increasingly use AI to launch and scale campaigns, the volume, speed, and sophistication of threats continue to rise. Closing that gap takes more than tooling. It takes a partner that pairs a leading security platform with scaled intelligence and human experts who can act on your behalf at any hour. That’s exactly what…

Microsoft US

tg: propagace tp: AI

10. 8. 18:00 · Microsoft Security Blog · Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise 

Payroll Pirates Phishing Campaign Targets Microsoft 365 Financial Workflows (Campaign)

The attack begins with phishing emails impersonating voicemail notifications that direct victims through a multi-stage redirect chain abusing legitimate services, including Google Meet, Google Ads infrastructure, and Amazon S3, before ultimately reaching an attacker-controlled...

Microsoft finance US

7. 8. 02:00 · Wiz Research · Payroll Pirates Phishing Campaign Targets Microsoft 365 Financial Workflows (Campaign)

CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-62873 Microsoft US

6. 8. 16:00 · Microsoft Security · CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability

CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-63508 Microsoft US

6. 8. 16:00 · Microsoft Security · CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-65667 Microsoft US

6. 8. 16:00 · Microsoft Security · CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability

CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

EPSS 0.01 CVE-2026-70332 Microsoft US

6. 8. 16:00 · Microsoft Security · CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability

CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-59115 Microsoft US

6. 8. 16:00 · Microsoft Security · CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

CVE-2026-62918 Microsoft Teams Spoofing Vulnerability

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

EPSS 0.00 CVE-2026-62918 Microsoft US

6. 8. 16:00 · Microsoft Security · CVE-2026-62918 Microsoft Teams Spoofing Vulnerability

CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-50516 Microsoft veřejná správa telekomunikace finance výroba a průmysl US

6. 8. 16:00 · Microsoft Security · CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-65668 Microsoft US

6. 8. 16:00 · Microsoft Security · CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

EPSS 0.00 CVE-2026-62896 Microsoft US

6. 8. 16:00 · Microsoft Security · CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

CVE-2026-59118 Microsoft Power Apps Elevation of Privilege Vulnerability

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.

EPSS 0.00 CVE-2026-59118 Microsoft US

6. 8. 16:00 · Microsoft Security · CVE-2026-59118 Microsoft Power Apps Elevation of Privilege Vulnerability

UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments

Written by: Tyler McLellan, Austin Larsen Introduction Google Threat Intelligence Group (GTIG) continues to track UNC6671 actively conducting compromises leading to data theft extortion, despite the alleged announced retirement of the BlackFile extortion brand in May 2026. Telemetry and infrastructure analysis reveal that rather than disbanding, UNC6671 has diversified its operations across multiple extortion fronts including Redact, Pink, Helix, and Falcon. UNC6671 continues to rely on voice…

Microsoft Okta finance US

6. 8. 16:00 · Mandiant / Google TI · UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments

​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)

As organizations adopt AI, they must secure both cloud and AI environments through a unified security control plane as their attack surface expands. Because modern applications and AI workloads are built and run in the cloud, security teams must understand which exposures matter most, prioritize what can truly be exploited, and reduce risk across cloud infrastructure, applications, identities, data, and AI systems in one place. Modern IT estates now span multiple clouds and on-premises systems,…

Microsoft US

tg: propagace tp: AI

5. 8. 18:30 · Microsoft Security Blog · ​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

The calculus of cybersecurity has changed. AI is reshaping how organizations build, deploy, operate, and defend digital systems. AI-powered development tools, agents, and autonomous workflows are accelerating innovation but they are also introducing new attack surfaces, new trust boundaries, and new security challenges. Microsoft has long helped organizations secure their digital estates using Zero Trust principles. That leadership was recently recognized by KuppingerCole analysts, which named…

Microsoft US

tg: novinka v produktu tg: návod tg: propagace tp: AI

4. 8. 20:30 · Microsoft Security Blog · Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET 

In this article What is device isolation?Case study: QNETAttack chain overviewMITRE ATT&CK techniques observedReferencesLearn more Microsoft Defender’s attack disruption now includes device isolation, a new response action that extends autonomous protection directly to compromised endpoints. At QNET, an attacker initiated a multi-stage attack using a legitimate Windows tool on a compromised endpoint to retrieve a malicious remote payload–a classic living-off-the-land (LOL) technique that often…

Microsoft obchod US

tg: incident tg: rozbor tg: propagace tp: malware tp: ransomware

4. 8. 19:54 · Microsoft Security Blog · 128 Seconds to disruption: Microsoft Defender stops ransomware at QNET 

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

In this article The CaptiveCrunch campaignStorm-2945 and Midnight BlizzardCaptiveCrunch tradecraft and toolingHow to protect against CaptiveCrunch activityMicrosoft Defender detections and hunting guidanceIndicators of compromise Since early May 2026, Microsoft Threat Intelligence has observed Storm-2945, a sub-cluster of Midnight Blizzard, conducting widespread but targeted traffic manipulation attacks involving hospitality sector networks served by captive portals worldwide. Despite some…

Microsoft veřejná správa US

tg: varování tg: rozbor tp: malware tp: phishing tp: identita tp: špionáž

31. 7. 23:01 · Microsoft Security Blog · CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Device Code Phishing Keeps Evolving. Here’s What to Watch For

Huntress is tracking an evolving wave of device code phishing that abuses trusted Microsoft 365 sign-in flows. Learn the signals defenders should watch for and how to respond.

Microsoft US

31. 7. 15:00 · Huntress · Device Code Phishing Keeps Evolving. Here’s What to Watch For

Security Alert: [Updated] Microsoft Releases July 2026 Security Updates

Microsoft JP

31. 7. 11:00 · JPCERT/CC · Security Alert: [Updated] Microsoft Releases July 2026 Security Updates

CaptiveCrunch: Midnight Blizzard Hospitality Network AiTM Campaign (Campaign)

Microsoft Threat Intelligence identified CaptiveCrunch, an ongoing cyberespionage campaign conducted by Storm-2945, a subgroup of the Russian state-sponsored actor Midnight Blizzard. The campaign compromises hospitality-sector captive portal infrastructure to perform adversary...

Microsoft obchod telekomunikace US

31. 7. 02:00 · Wiz Research · CaptiveCrunch: Midnight Blizzard Hospitality Network AiTM Campaign (Campaign)

​​​​What’s new in Microsoft Security: July 2026

Every organization needs security that protects end to end with the speed and scale of AI. Microsoft’s vision is simple: security should be ambient and autonomous, just like the AI it protects. As organizations scale AI and expand across environments, security teams need protection that covers every surface. This month’s updates help security and IT teams secure their AI environments, use AI to defend at speed and scale, and strengthen the foundations that AI-powered operations depend on.…

Microsoft US

tg: novinka v produktu tg: propagace tp: AI tp: identita

30. 7. 18:00 · Microsoft Security Blog · ​​​​What’s new in Microsoft Security: July 2026

Stop rewriting detection rules by hand: automatic Sentinel-to-Elastic migration is here

Elastic automatically translates your Microsoft Sentinel detection rules into Elastic Security. Export your Scheduled and Near Real Time (NRT) analytics rules from Sentinel, upload them, and Elastic picks up the mapping and translation from there using an LLM you choose. Watchlists and severity mappings carry over. This is the first automatic migration path off a modern SIEM, available now in Tech Preview in 9.5, and it works across multiple cloud providers and regions so you can deploy closer…

Elastic Microsoft US

tg: novinka v produktu tg: propagace tp: AI

29. 7. 02:00 · Elastic Security · Stop rewriting detection rules by hand: automatic Sentinel-to-Elastic migration is here

Stop rewriting detection rules by hand: automatic Sentinel-to-Elastic migration is here

Elastic automatically translates your Microsoft Sentinel detection rules into Elastic Security. Export your Scheduled and Near Real Time (NRT) analytics rules from Sentinel, upload them, and Elastic picks up the mapping and translation from there using an LLM you choose. Watchlists and severity mappings carry over. This is the first automatic migration path off a modern SIEM, available now in Tech Preview in 9.5, and it works across multiple cloud providers and regions so you can deploy closer…

Elastic Microsoft US

tg: novinka v produktu tg: propagace tp: AI

29. 7. 02:00 · Elastic Security · Stop rewriting detection rules by hand: automatic Sentinel-to-Elastic migration is here

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Phishing was the primary means of gaining initial access this quarter, appearing in over half of all Cisco Talos Incident Response (Talos IR) engagements – an increase from approximately a third of engagements last quarter. Attackers continued to innovate their delivery methods to evade defenses, deploying QR code-embedded PDFs to bypass traditional email gateways and hosting links on trusted cloud platforms. We also saw a spike in authentication abuse this quarter — observed in 65 percent of…

Microsoft Zoho US

28. 7. 12:00 · Cisco Talos · IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Chaos in Teams vishing

Attackers used Microsoft Teams vishing, custom malware, and remote access tools to facilitate ransomware deploymentCategories: Threat ResearchTags: Microsoft Teams, vishing, Ransomware, Chaos

Microsoft GB

28. 7. 02:00 · Sophos Threat Research · Chaos in Teams vishing

CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability

Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.

EPSS 0.01 CVE-2026-56191 Microsoft US

23. 7. 16:00 · Microsoft Security · CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability

CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-50517 Microsoft US

23. 7. 16:00 · Microsoft Security · CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability

CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.

EPSS 0.01 CVE-2026-49159 Microsoft US

23. 7. 16:00 · Microsoft Security · CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability

CVE-2026-54120 Microsoft Surface Remote Code Execution Vulnerability

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-54120 Microsoft US

23. 7. 16:00 · Microsoft Security · CVE-2026-54120 Microsoft Surface Remote Code Execution Vulnerability

CVE-2026-56165 Microsoft Account Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-56165 Microsoft US

23. 7. 16:00 · Microsoft Security · CVE-2026-56165 Microsoft Account Remote Code Execution Vulnerability

CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

EPSS 0.00 CVE-2026-56163 Microsoft US

23. 7. 16:00 · Microsoft Security · CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

SPOJENO PŘES CVE ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-50325.

EPSS 0.00 CVSS 7.0 CVE-2026-50325 Microsoft US

21. 7. 07:00 · Zero Day Initiative · ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability 14. 7. 16:00 · Microsoft Security · CVE-2026-50325 Win32k Elevation of Privilege Vulnerability

SPOJENO PŘES CVE ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-50297.

EPSS 0.00 CVSS 7.0 CVE-2026-50297 Microsoft US

21. 7. 07:00 · Zero Day Initiative · ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability 14. 7. 16:00 · Microsoft Security · CVE-2026-50297 Win32k Elevation of Privilege Vulnerability

July Patch Tuesday only feels endless

<p>AI deluge brings 575 CVEs, 479 advisories, reset to blog-post format</p>Categories: Threat ResearchTags: x-ops, Patch Tuesday, MICROSOFT PATCH TUESDAY

Microsoft GB

21. 7. 02:00 · Sophos Threat Research · July Patch Tuesday only feels endless

HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels

Group-IB uncovers HOLLOWGRAPH, a Windows malware that abuses Microsoft Graph API to exfiltrate files and receive commands from the attacker using Microsoft 365 calendar events, and DNS tunneling to refresh credentials used in C2 communication.

Microsoft SG

20. 7. 09:00 · Group-IB · HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels

Microsoft VSS: Still Essential, But Not the Whole Story

Microsoft VSS remains a cornerstone of Windows data protection, but its architectural limits matter. Learn when to rely on it and when to go beyond it.

Microsoft US

17. 7. 16:00 · Huntress · Microsoft VSS: Still Essential, But Not the Whole Story

Begun, the Patch Wars have

Welcome to this week’s edition of the Threat Source newsletter. We all knew, to some degree or another, that this summer was going to a hot mess. I don’t mean FIFA drama or record setting heat waves. I mean the slow but steady momentum that AI frontier models were accruing for vulnerability research. If you were like me, and guesstimating exactly when that shoe would drop, my money was on the middle of summer. And... well, friends, I hate to say it, but I was right. This July’s Patch Tuesday is…

Microsoft US

tg: rozbor tg: názor tg: přehled tp: malware tp: AI

16. 7. 20:00 · Cisco Talos · Begun, the Patch Wars have

Riasztás Microsoft szoftverek 2026 júliusában javított sérülékenységeiről

A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki a Microsoft szoftvereket érintő kritikus kockázati besorolású sérülékenységek kapcsán azok súlyossága, a szoftverek széleskörű elterjedtsége, valamint az egyes biztonsági hibákat érintő aktív kihasználások miatt. A Microsoft tárgyhavi biztonsági csomagjában összesen 622 különböző biztonsági hibát javított, köztük 3 db nulladik napi (zero-day) sebezhetőséget is amelyet a Microsoft […]

Microsoft HU

16. 7. 11:15 · NKI Maďarsko · Riasztás Microsoft szoftverek 2026 júliusában javított sérülékenységeiről

Aggiornamenti Mensili Microsoft

Microsoft ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono un totale di 622 nuove vulnerabilità, di cui 2 di tipo 0-day.

Microsoft IT

16. 7. 10:26 · CSIRT Itálie (ACN) · Aggiornamenti Mensili Microsoft

Patchtisdag juli 2026 – samlad information om månadens säkerhetsuppdateringar

Flera leverantörer har släppt sina månatliga säkerhetsuppdateringar för juli. Nedan finns en sammanställning av de säkerhetsuppdateringar som Cisco, Microsoft, SAP, Ivanti, Fortinet och Adobe har publicerat inför och i samband med patchtisdagen. Följ länkarna för att komma till respektive leverantörs uppdateringar. [1, 2, 3, 4, 5, 6]

Cisco Microsoft SAP Ivanti SE

15. 7. 13:30 · CERT-SE · Patchtisdag juli 2026 – samlad information om månadens säkerhetsuppdateringar

SPOJENO PŘES CVE ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft PowerShell. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-40400.

EPSS 0.01 CVSS 7.8 CVE-2026-40400 Microsoft US

15. 7. 07:00 · Zero Day Initiative · ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability 14. 7. 16:00 · Microsoft Security · CVE-2026-40400 Windows PowerShell Remote Code Execution Vulnerability

SPOJENO PŘES CVE ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-49805.

EPSS 0.00 CVSS 7.0 CVE-2026-49805 Microsoft US

15. 7. 07:00 · Zero Day Initiative · ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability 14. 7. 16:00 · Microsoft Security · CVE-2026-49805 Win32k Elevation of Privilege Vulnerability

SPOJENO PŘES CVE ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Hyper-V. An attacker must first obtain the ability to execute low-privileged code within a Windows virtual machine under Hyper-V in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-54129.

EPSS 0.00 CVSS 7.8 CVE-2026-54129 Microsoft US

15. 7. 07:00 · Zero Day Initiative · ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability 14. 7. 16:00 · Microsoft Security · CVE-2026-54129 Windows Hyper-V Elevation of Privilege Vulnerability

SPOJENO PŘES CVE ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50311.

EPSS 0.00 CVSS 7.8 CVE-2026-50311 Microsoft veřejná správa US

15. 7. 07:00 · Zero Day Initiative · ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability 14. 7. 16:00 · Microsoft Security · CVE-2026-50311 Windows Server Elevation of Privilege Vulnerability

SPOJENO PŘES CVE ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute web requests with a target user's privileges on affected installations of Microsoft SharePoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-55126.

EPSS 0.01 CVSS 7.3 CVE-2026-55126 Microsoft US

15. 7. 07:00 · Zero Day Initiative · ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability 14. 7. 16:00 · Microsoft Security · CVE-2026-55126 Microsoft SharePoint Server Spoofing Vulnerability