Multiple vulnerabilities in Microsoft Apps

Beschreibung

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft PowerToys can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Office for Android can be exploited remotely to spoof user interface.
4. A spoofing vulnerability in Microsoft Bing Search can be exploited remotely to spoof user interface.
5. A security feature bypass vulnerability in Microsoft PC Manager can be exploited remotely to bypass security restrictions.
6. An elevation of privilege vulnerability in Microsoft PC Manager can be exploited remotely to gain privileges.

Ursprüngliche Informationshinweise

• CVE-2026-42902

• CVE-2026-44803
• CVE-2026-44812
• CVE-2026-45649
• CVE-2026-45650
• CVE-2026-49161
• CVE-2026-50511
• CVE-2026-50512

Ausnutzung

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Betroffene Produkte

• Microsoft-Word
• Microsoft-Bing
• Microsoft-PC-Manager

CVE Liste

• CVE-2026-42902
  critical
• CVE-2026-44803
  critical
• CVE-2026-44812
  critical
• CVE-2026-45649
  high
• CVE-2026-45650
  warning
• CVE-2026-49161
  critical
• CVE-2026-50511
  critical
• CVE-2026-50512
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com