windows security update

Microsoft disclosed CVE-2026-40382, a Windows Telephony Service elevation-of-privilege vulnerability, in its Security Update Guide on May 12, 2026, identifying the affected component as part of Windows and giving administrators enough confidence to treat the issue as real even if exploit...

Microsoft disclosed CVE-2026-34347 on May 12, 2026, as an Important-rated Windows Win32k elevation-of-privilege vulnerability in which a local, authenticated attacker could exploit a use-after-free flaw in the Win32K graphics subsystem to gain SYSTEM privileges after winning a race condition...

Microsoft has published CVE-2026-21530 as a Windows Rich Text Edit elevation-of-privilege vulnerability in the May 2026 security update cycle, identifying the affected technology as a Windows text-rendering/editing component and classifying the impact as local privilege escalation. The important...

Microsoft’s April 2026 Windows security update adds the third-party psmounterex.sys kernel driver to the Microsoft Vulnerable Driver Blocklist, causing backup-image mounting and some VSS snapshot workflows to fail on affected Windows 10, Windows 11, and Windows Server systems. The breakage is...

CVE-2026-27920 lands in familiar territory for Windows defenders: a local elevation-of-privilege flaw in the Windows UPnP Device Host service, with Microsoft’s April 14, 2026 update closing the hole across a wide range of client and server builds. Early technical summaries describe the issue as...

Microsoft has assigned CVE-2026-27914 to a Microsoft Management Console (MMC) elevation-of-privilege vulnerability, and the timing matters as much as the label. The record indicates a local flaw with low attack complexity and high confidentiality, integrity, and availability impact, which is...

Microsoft has issued a security advisory for a serious Win32k kernel vulnerability — an ICOMP type‑confusion bug that can be triggered by an authorized local user to escalate to SYSTEM — and organizations should treat this as a high‑priority elevation‑of‑privilege (EoP) risk until every affected...