Microsoft Security Response Center Blog Alerts

Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.

Changes made to the security updates links and information. This is an informational change only.

Acknowledgement added. This is an informational change only.

Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.

Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network.

A heap‑based buffer overflow exists in libjpeg‑turbo’s h2v2_merged_upsample_internal() function when processing 12‑bit lossless JPEG images. An attacker could craft an image containing out‑of‑range 12‑bit samples that, when decompressed with merged upsampling enabled, may trigger a segmentation fault or buffer overflow, resulting in an application crash.

Null pointer dereference in Windows LDAP – Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.