Multiple vulnerabilities in Microsoft Apps

Description

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft PowerToys can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Office for Android can be exploited remotely to spoof user interface.
4. A spoofing vulnerability in Microsoft Bing Search can be exploited remotely to spoof user interface.
5. A security feature bypass vulnerability in Microsoft PC Manager can be exploited remotely to bypass security restrictions.
6. An elevation of privilege vulnerability in Microsoft PC Manager can be exploited remotely to gain privileges.

Original advisories

• CVE-2026-42902

• CVE-2026-44803
• CVE-2026-44812
• CVE-2026-45649
• CVE-2026-45650
• CVE-2026-49161
• CVE-2026-50511
• CVE-2026-50512

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Word
• Microsoft-Bing
• Microsoft-PC-Manager

CVE list

• CVE-2026-42902
  critical
• CVE-2026-44803
  critical
• CVE-2026-44812
  critical
• CVE-2026-45649
  high
• CVE-2026-45650
  warning
• CVE-2026-49161
  critical
• CVE-2026-50511
  critical
• CVE-2026-50512
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com