Today's Top Windows System Articles for 2026-10-14
Articles for the IT Professional. Today's edition includes 150 articles from 18 sites. We chose these from 8845 articles found on 131 sites.
Today's featured sites are:
Fast Company - technology, Irish Tech News, New blog articles in Microsoft Community Hub, www.theregister.com - Articles, Ars Technica - All content, GeekWire, AppleInsider News, Petri IT Knowledgebase, Check Point Research, 9to5Mac, ATA Learning, IEEE Spectrum, Neowin, darkreading, Windows Latest, WIRED, gHacks, MSRC Security Update Guide.
Data centers produce heat year-round. Here’s how to save it for winter
You have probably noticed it on a hot summer day: A basement feels cool even when the air outside is baking. The ground does not heat up and cool down as fast as the air does. A few hundred feet down,...
Fast Company - technology
Oct 12, 2026 - fastcompany.com
The Sargassum seaweed challenge, a possible solution for solutions for coastal pollution
The Marine Institute has successfully piloted an international internship programme with the School of Arts and Sciences at St. George’s University (SGU), Grenada, through the Our Shared Ocean capacit...
Irish Tech News
Oct 12, 2026 - irishtechnews.ie
Not Every Decision Needs an LLM: Getting Started with Microsoft-Decision-1
Every AI team today is balancing the same three pressures: cost, accuracy, and performance. Large language models excel at generating text, but the latest generation relies heavily on step-by-step rea...
New blog articles in Microsoft Community Hub
Oct 12, 2026 - techcommunity.microsoft.com
Lessons Learned #559: Understanding query timeouts in Azure SQL Database
In a recent support case, an application using Hibernate and the Microsoft JDBC Driver for SQL Server reported "The query has timed out". The application team had timestamps for the failures, but the ...
New blog articles in Microsoft Community Hub
Oct 12, 2026 - techcommunity.microsoft.com
Renewable electricity from Roscommon wind farm powering Dublin workspace
Pembr, a provider of serviced workspaces in Dublin City Centre, has signed a 24-month corporate power purchase agreement (CPPA) with Pinergy, negotiated by Procure.ie, Ireland’s leading energy broker....
Irish Tech News
Oct 12, 2026 - irishtechnews.ie
Celebrating the brilliant pragmatism of TCP/IP, the wiring of the world
Nothing this old should scale this well. Yet here these words are
www.theregister.com - Articles
Oct 12, 2026 - theregister.com
When you just need to build a tiny desktop app: TinyJS
How a micro JavaScript runtime uses native OS webviews to shrink the desktop footprint.
www.theregister.com - Articles
Oct 12, 2026 - theregister.com
Imagine there's no Shiny Hunters – AI could make human hacking crews obsolete
This week on The Kettle, we discuss some arrests and how Mythos' mathematical expertise has led to a second exploited bug that no human would have found
www.theregister.com - Articles
Oct 12, 2026 - theregister.com
Amazon has over 1 million robot workers. What’s next for human employees?
The second-largest corporate employer has bet big on robot workers to scale.
Ars Technica - All content
Oct 12, 2026 - arstechnica.com
Delivering Agent Skills Over MCP
Getting a skill working with one agent is a useful start. Sharing it with other agents raises a different question: where should that skill live? You could give each agent its own copy. But when the s...
New blog articles in Microsoft Community Hub
Oct 12, 2026 - techcommunity.microsoft.com
MTU puts Ireland’s maritime cyber defences to the test in simulated port attack
Munster Technological University (MTU) brought together participants from the Irish Naval Service, the Irish Defence Forces, and MTU researchers and students for the Cybersecurity Smart Maritime Chall...
Irish Tech News
Oct 12, 2026 - irishtechnews.ie
Microsoft makes ‘biggest bet yet’ on its own silicon, unveils new AI chip to reduce reliance on Nvidia
Microsoft says its homegrown Maia chips will handle most of the AI work behind Copilot and its other products, with the new Maia 300 rolling out in 2027. The company says the new chip does more AI wor...
GeekWire
Oct 12, 2026 - geekwire.com
Pigeon-powered internet packet goes under the hammer at Christie's
25 years after taking flight, a surviving packet from the world's most impractical network has attracted a $4,000 bid
www.theregister.com - Articles
Oct 12, 2026 - theregister.com
Where Apple focused engineering so the iPhone Duo could have desktop-like performance
To make the iPhone Duo as thin as it is, Apple needed to make a lot of design choices to fend off heat. Here's what they did, how they did it, and where in the device the innovations live.iPhone DuoFo...
AppleInsider News
Oct 12, 2026 - appleinsider.com
Enterprise AI’s Biggest Challenge Isn’t Technology. It’s Organisational Readiness
Until recently, conversations about enterprise AI have focused on models, infrastructure, and computing power. But according to Karthik Sj, who leads Generative AI at LogicMonitor, many organisations ...
Petri IT Knowledgebase
Oct 12, 2026 - petri.com
London cabbies want Sadiq Khan to slam the brakes on robotaxis
Union urges Mayor to halt driverless taxi rollout as City Hall report raises questions about safety, congestion, and who's actually in charge
www.theregister.com - Articles
Oct 12, 2026 - theregister.com
Silicon Valley responds to Trump’s hands-off approach to AI regulation at Tech Week
Tech Week is in full bloom in San Francisco, packing the city’s restaurants this week with venture capitalists and AI founders ebullient about the White House’s stance on regulating artificial intelli...
Fast Company - technology
Oct 12, 2026 - fastcompany.com
Microsoft giveth and Microsoft taketh away: Copilot edition
Office documents in Copilot? Absolutely! Using Copilot to make Outlook themes? Nah…
www.theregister.com - Articles
Oct 12, 2026 - theregister.com
12th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Denmark’s government has disclosed a breach involv...
Check Point Research
Oct 12, 2026 - research.checkpoint.com
Microsoft Warns IT Admins About Windows Update Certificate Expiration
Microsoft has alerted IT administrators that the certificates used to establish trusted connections between Windows devices and Windows Update servers will expire in May and June 2027. Devices that do...
Petri IT Knowledgebase
Oct 12, 2026 - petri.com
Security Bite: This nifty privacy app blurs your Mac screen the second you look away
9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to mana...
9to5Mac
Oct 12, 2026 - 9to5mac.com
Troubleshoot Missing AI Prompts in Purview Activity Explorer
Find why Purview records AI activity without prompt text. Check audit settings, capture policies, and viewer permissions in a scoped test.
ATA Learning
Oct 12, 2026 - adamtheautomator.com
Stop Copilot Web Searches from Leaking Sensitive Data
Block Microsoft 365 Copilot from sending sensitive prompt text to external web search with a Purview DLP rule, then prove the block in the audit log.
ATA Learning
Oct 12, 2026 - adamtheautomator.com
Windows 11's easiest account bypass gets the Microsoft boot
'Learn More' shortcut to local setup reportedly patched server-side, leaving users with more involved workarounds
www.theregister.com - Articles
Oct 12, 2026 - theregister.com
Hybrid EUC Environments Are Becoming the Enterprise Norm
Enterprise end-user computing (EUC) is undergoing a major shift as organizations move away from traditional desktop virtualization environments toward cloud-based services such as Windows 365 and Azur...
Petri IT Knowledgebase
Oct 12, 2026 - petri.com
Russia was not ready for the data center war it started with Ukraine
Russian bloggers warn Russia’s hyper-centralized digital economy is vulnerable.
Ars Technica - All content
Oct 12, 2026 - arstechnica.com
Meet the Anthropic Engineer Keeping Its AI Agent Trustworthy
If you’ve ever wondered how Claude and similar AI agents can answer complex questions in seconds and where they get the information, you’re not alone.Gurmeet Saran works to find that answer every day ...
IEEE Spectrum
Oct 12, 2026 - spectrum.ieee.org
Here are all the new features Microsoft recently added to Entra for IT admins
Microsoft is making big changes to Entra, but its latest identity security updates hint at a much bigger challenge that IT admins cannot ignore. Read more...
Neowin
Oct 12, 2026 - neowin.net
Microsoft blames a configuration change for Exchange Admin Center tumble
Rollback fixed things, but stop us if you've heard this before
www.theregister.com - Articles
Oct 12, 2026 - theregister.com
Prominent Ransomware Negotiator Faces Extortion Charges
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
darkreading
Oct 12, 2026 - darkreading.com
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
darkreading
Oct 12, 2026 - darkreading.com
39-year-old unvaccinated woman becomes 6th measles death in Pennsylvania
As of Friday, state health officials reported 1,136 cases across 41 counties.
Ars Technica - All content
Oct 12, 2026 - arstechnica.com
Users keep rejecting Copilot, and now Microsoft is killing its AI themes in Outlook (New) for Windows
Microsoft appears to be realizing that nobody wants Copilot in places where it's not required, and Outlook is next to lose AI themes. The post Users keep rejecting Copilot, and now Microsoft is killin...
Windows Latest
Oct 13, 2026 - windowslatest.com
Microsoft Publisher begins disappearing from PCs after 35 years, and your .pub files won’t open in Microsoft 365 anymore
Microsoft Publisher has been retired, and it has already stopped working on some PCs, but some of you might still be able to access it. The post Microsoft Publisher begins disappearing from PCs after ...
Windows Latest
Oct 13, 2026 - windowslatest.com
One click let you escape Microsoft’s forced sign-in on Windows 11. Of course, Microsoft killed it
A month after we found that a tiny link in Windows 11 setup created a local account, Microsoft closed it without a word. Here's what the link does on a fresh 26H2 ISO now, how Microsoft blocked older ...
Windows Latest
Oct 13, 2026 - windowslatest.com
ExpressVPN Coupons: 80% Off
Learn how to get the best value from your ExpressVPN subscription plans, whether you need a flexible 1-month plan or want to lock in up to 61% savings on multi-year deals.
WIRED
Oct 13, 2026 - wired.com
Microsoft Sets November 10 as the Final Security Update for Windows 11 23H2 Enterprise and Education
Microsoft has reminded organizations that Windows 11 version 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates after Thank you for being a Ghacks reader. Th...
gHacks
Oct 13, 2026 - ghacks.net
CVE-2026-102849 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102850 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
ADV260001 ADV260001 Hardening changes for ReFS volumes on removable media
Starting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the [Resilient File System (ReFS)](https://learn.microsoft.com/windows-server/storage/ref...
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105725 Windows Security App Elevation of Privilege Vulnerability
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105727 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105728 Dynamics Business Central Information Disclosure Vulnerability
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108400 HEVC Video Extensions Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108457 Microsoft Windows PDF Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108468 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102227 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102229 Visual Studio Code Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102231 Visual Studio Code Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102232 Visual Studio Code Security Feature Bypass Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102233 Visual Studio Code Security Feature Bypass Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102234 Visual Studio Code Security Feature Bypass Vulnerability
Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102235 Visual Studio Code Remote Code Execution Vulnerability
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-70098 Visual Studio Code Remote Code Execution Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-96956 SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102855 Microsoft Office Visio Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102856 Microsoft Office Visio Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102857 Microsoft Office Visio Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102859 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102860 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102861 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102862 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102863 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102864 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102865 Microsoft Office SharePoint Information Disclosure Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102866 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-102867 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-96183 Windows Health and Optimized Experiences Service Information Disclosure Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105591 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105592 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105593 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105595 Microsoft Office Access Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105596 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105597 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105598 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105599 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-94506 Microsoft Office Access Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105713 Microsoft Office SharePoint Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105714 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105715 Microsoft Office Word Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105716 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105720 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-97800 Windows Mobile Broadband Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108458 Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69370 Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108467 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105717 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105718 Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105719 Microsoft SharePoint Server Information Disclosure Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105722 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105723 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105726 Microsoft Defender Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-70235 Windows Event Tracing Spoofing Vulnerability
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105732 SysInternals Elevation of Privilege Vulnerability
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108461 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108462 Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108464 Software Protection Platform (SPP) Elevation of Privilege Vulnerability
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108466 Windows Kernel Denial of Service Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69898 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-108460 Windows Message Queuing Remote Code Execution Vulnerability
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-49785 UEFI Secure Boot Security Feature Bypass Vulnerability
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-72968 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69363 Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-70566 Windows Schannel Elevation of Privilege Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-61931 Windows Perception Simulation Service Elevation of Privilege Vulnerability
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69763 Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69766 Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69935 Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69795 Windows Clipboard Server Elevation of Privilege Vulnerability
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69867 SQLite Elevation of Privilege Vulnerability
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69914 Windows AppX Deployment Service Information Disclosure Vulnerability
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69840 Windows Certificates Elevation of Privilege Vulnerability
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69850 Windows Certificates Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69926 Desktop Window Manager Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69905 Windows AppX Deployment Service Tampering Vulnerability
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69909 Microsoft COM for Windows Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69913 Windows TCP/IP Remote Code Execution Vulnerability
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69918 Windows Core Messaging Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69942 Windows Overlay Filter Remote Code Execution Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69945 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69950 Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69947 Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69952 Windows Overlay Filter Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69953 Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69954 Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69957 Windows Overlay Filter Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69958 Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69959 Windows Overlay Filter Remote Code Execution Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69963 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69967 Windows Overlay Filter Information Disclosure Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69966 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69964 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69968 Windows libarchive Tampering Vulnerability
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69970 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69969 Windows AppX Deployment Service Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69971 Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69973 Windows libarchive Tampering Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69974 Desktop Window Manager Information Disclosure Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69976 Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69978 Microsoft Windows VMSwitch Denial of Service Vulnerability
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
MSRC Security Update Guide
Oct 13, 2026 - msrc.microsoft.com
CVE-2026-69979 Windows AppX Deployment Service Security Feature Bypass Vulnerability
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.