Windows update

1. CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability

   Updated an acknowledgement. This is an informational change only.

2. CVE-2026-77886 Windows DHCP Server Denial of Service Vulnerability

   Updated an acknowledgement. This is an informational change only.

3. CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

   Updated an acknowledgement. This is an informational change only.

4. CVE-2026-69498 Windows Win32k Elevation of Privilege Vulnerability

   Updated an acknowledgement. This is an informational change only.

5. CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability

   Updated an acknowledgement. This is an informational change only.

6. CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability

   Updated an acknowledgement. This is an informational change only.

7. CVE-2026-55134 Microsoft Word Remote Code Execution Vulnerability

   Updated an acknowledgement. This is an informational change only.

8. CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability

   Updated an acknowledgement. This is an informational change only.

9. CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability

   Updated an acknowledgement. This is an informational change only.

10. CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

11. CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

12. CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

13. CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

14. CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

15. CVE-2026-78510 Microsoft Outlook and Word Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

16. CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability

    Updated an acknowledgement. This is an informational change only.

17. CVE-2026-62871 .NET Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

18. CVE-2026-63532 Microsoft Office Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

19. CVE-2026-68798 Microsoft Excel Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

20. CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

21. CVE-2026-40400 Windows PowerShell Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

22. CVE-2026-55039 Microsoft Excel Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

23. CVE-2026-55123 Microsoft PowerPoint Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

24. CVE-2026-88097 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.

25. Chromium: CVE-2026-0899 Out of bounds memory access in V8

    Information published.

26. CVE-2026-55946 Microsoft Copilot Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

27. CVE-2026-70009 Azure Arc Elevation of Privilege Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

28. CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability

    Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.

29. CVE-2026-77903 Microsoft Dataverse Elevation of Privilege Vulnerability

    Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.

30. CVE-2026-69399 Azure Arc Elevation of Privilege Vulnerability

    Information published.

31. CVE-2026-68791 Azure Machine Learning Information Disclosure Vulnerability

    Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.

32. CVE-2026-85885 Microsoft 365 Copilot Elevation of Privilege Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.

33. CVE-2026-83944 Azure Logic Apps Elevation of Privilege Vulnerability

    Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

34. CVE-2026-78501 Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.

35. CVE-2026-87701 Azure Cosmos DB Elevation of Privilege Vulnerability

    Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.

36. CVE-2026-70200 Azure Logic Apps Elevation of Privilege Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

37. CVE-2026-85889 Azure AI Foundry Elevation of Privilege Vulnerability

    Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

38. CVE-2026-85917 Azure AI Foundry Elevation of Privilege Vulnerability

    Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

39. CVE-2026-69671 Microsoft Office Word Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

40. CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

41. CVE-2026-69686 Microsoft Office Word Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

42. CVE-2026-69722 Microsoft Office Word Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

43. CVE-2026-69734 Microsoft Office Word Information Disclosure Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

44. CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

45. CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

46. CVE-2026-69739 Microsoft Office Information Disclosure Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

47. CVE-2026-69759 Microsoft Office Word Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

48. CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

49. CVE-2026-69797 Microsoft Office PowerPoint Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

50. CVE-2026-77898 Microsoft Office Remote Code Execution Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.