Multiple vulnerabilities in Microsoft Apps

Описание

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft PowerToys can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Office for Android can be exploited remotely to spoof user interface.
4. A spoofing vulnerability in Microsoft Bing Search can be exploited remotely to spoof user interface.
5. A security feature bypass vulnerability in Microsoft PC Manager can be exploited remotely to bypass security restrictions.
6. An elevation of privilege vulnerability in Microsoft PC Manager can be exploited remotely to gain privileges.

Первичный источник обнаружения

• CVE-2026-42902

• CVE-2026-44803
• CVE-2026-44812
• CVE-2026-45649
• CVE-2026-45650
• CVE-2026-49161
• CVE-2026-50511
• CVE-2026-50512

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Word
• Microsoft-Bing
• Microsoft-PC-Manager

Список CVE

• CVE-2026-42902
  critical
• CVE-2026-44803
  critical
• CVE-2026-44812
  critical
• CVE-2026-45649
  high
• CVE-2026-45650
  warning
• CVE-2026-49161
  critical
• CVE-2026-50511
  critical
• CVE-2026-50512
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com