Multiple vulnerabilities in Microsoft Apps

Description

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Power Apps can be exploited remotely to execute arbitrary code.
2. A tampering vulnerability in Microsoft PowerToys can be exploited remotely to spoof user interface.
3. A remote code execution vulnerability in Windows Paint can be exploited remotely to execute arbitrary code.
4. An elevation of privilege vulnerability in Microsoft PowerToys can be exploited remotely to gain privileges.

Original advisories

• CVE-2026-70213

• CVE-2026-83681
• CVE-2026-83844
• CVE-2026-96188

Exploitation

CVE list

• CVE-2026-70213
  critical
• CVE-2026-83681
  high
• CVE-2026-83844
  unknown
• CVE-2026-96188
  unknown

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com