Multiple vulnerabilities in Microsoft Apps

Popis

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft PowerToys can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Office for Android can be exploited remotely to spoof user interface.
4. A spoofing vulnerability in Microsoft Bing Search can be exploited remotely to spoof user interface.
5. A security feature bypass vulnerability in Microsoft PC Manager can be exploited remotely to bypass security restrictions.
6. An elevation of privilege vulnerability in Microsoft PC Manager can be exploited remotely to gain privileges.

Oficiální doporučení

• CVE-2026-42902

• CVE-2026-44803
• CVE-2026-44812
• CVE-2026-45649
• CVE-2026-45650
• CVE-2026-49161
• CVE-2026-50511
• CVE-2026-50512

Vykořisťování

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Související produkty

• Microsoft-Word
• Microsoft-Bing
• Microsoft-PC-Manager

seznam CVE

• CVE-2026-42902
  critical
• CVE-2026-44803
  critical
• CVE-2026-44812
  critical
• CVE-2026-45649
  high
• CVE-2026-45650
  warning
• CVE-2026-49161
  critical
• CVE-2026-50511
  critical
• CVE-2026-50512
  critical

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com