Multiple vulnerabilities in Microsoft Apps

説明

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft PowerToys can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Office for Android can be exploited remotely to spoof user interface.
4. A spoofing vulnerability in Microsoft Bing Search can be exploited remotely to spoof user interface.
5. A security feature bypass vulnerability in Microsoft PC Manager can be exploited remotely to bypass security restrictions.
6. An elevation of privilege vulnerability in Microsoft PC Manager can be exploited remotely to gain privileges.

オリジナルアドバイザリー

• CVE-2026-42902

• CVE-2026-44803
• CVE-2026-44812
• CVE-2026-45649
• CVE-2026-45650
• CVE-2026-49161
• CVE-2026-50511
• CVE-2026-50512

エクスプロイテーション

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

関連製品

• Microsoft-Word
• Microsoft-Bing
• Microsoft-PC-Manager

CVEリスト

• CVE-2026-42902
  critical
• CVE-2026-44803
  critical
• CVE-2026-44812
  critical
• CVE-2026-45649
  high
• CVE-2026-45650
  warning
• CVE-2026-49161
  critical
• CVE-2026-50511
  critical
• CVE-2026-50512
  critical

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com