CVE-2021-26434: Security Update Guide - Microsoft Security Response Center

Microsoft Edge (Chrome based) Spoofing on IE Mode

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Elevation of Privilege Vulnerability

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

Windows TCP/IP Denial of Service Vulnerability

SCOM Information Disclosure Vulnerability

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability

Microsoft Exchange Server Denial of Service Vulnerability

Windows AppX Deployment Service Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Windows NAT Denial of Service Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Active Directory Federation Server Spoofing Vulnerability

Windows Nearby Sharing Elevation of Privilege Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

Windows Subsystem for Linux Elevation of Privilege Vulnerability

BitLocker Security Feature Bypass Vulnerability

Windows Scripting Engine Memory Corruption Vulnerability

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

Visual Studio Code Spoofing Vulnerability

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38635, CVE-2021-38636.

Windows SMB Elevation of Privilege Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969, CVE-2021-38636.

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969, CVE-2021-38635.

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Tampering Vulnerability

Windows DNS Elevation of Privilege Vulnerability

Windows Key Storage Provider Security Feature Bypass Vulnerability

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

Microsoft Exchange Server Security Feature Bypass Vulnerability

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.