Accessibility. An authorization issue was addressed with improved state management.

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

Windows NTLM V1 Elevation of Privilege Vulnerability

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you.

Microsoft Bing Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.

Chromium: CVE-2023-2136 Integer overflow in Skia

Chromium: CVE-2023-6345 Integer overflow in Skia

Microsoft Power Platform Connector Spoofing Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Chromium: CVE-2024-0517 Out of bounds write in V8

Chromium: CVE-2024-0518 Type Confusion in V8

Chromium: CVE-2024-0519 Out of bounds memory access in V8

Chromium: CVE-2024-3159 Out of bounds memory access in V8

Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Chromium: CVE-2023-4762 Type Confusion in V8

Chromium: CVE-2025-5419 Out of bounds read and write in V8

Chromium: CVE-2025-5068 Use after free in Blink

Chromium: CVE-2023-4863 Heap buffer overflow in WebP

Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

Chromium: CVE-2023-2033 Type Confusion in V8

Chromium: CVE-2023-3079 Type Confusion in V8

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.