Microsoft Security Response Center Blog Alerts

Updated product information in the Software Update table. This is an informational change only.

Updated product information in the Software Update table. This is an informational change only.

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Improper neutralization of input during web page generation (‘cross-site scripting’) in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

Updated product information in the Software Update table. This is an informational change only.

Updated product information in the Software Update table. This is an informational change only.

Updated product information in the Software Update table. This is an informational change only.

Updated product information in the Software Update table. This is an informational change only.

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.