Описание
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, spoof user interface.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in Microsoft Power Apps can be exploited remotely to execute arbitrary code.
- A tampering vulnerability in Microsoft PowerToys can be exploited remotely to spoof user interface.
- A remote code execution vulnerability in Windows Paint can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Microsoft PowerToys can be exploited remotely to gain privileges.
Первичный источник обнаружения
Эксплуатация
Список CVE
- CVE-2026-70213 unknown
- CVE-2026-83681 unknown
- CVE-2026-83844 unknown
- CVE-2026-96188 unknown
Смотрите также
Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com
Нашли неточность в описании этой уязвимости? Дайте нам знать!