Common Vulnerabilities and Exposures (CVE)
CVE-2026-85873
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
CVE-2026-83746
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
CVE-2026-77910
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-70571
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVE-2026-70297
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
CVE-2026-70279
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70264
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
CVE-2026-70261
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
CVE-2026-70260
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
CVE-2026-70250
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-70229
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVE-2026-70228
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-70227
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-70184
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-70111
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.