Microsoft
CVE-2026-33825: Microsoft Defender local privilege escalationNew!!
CISA lists CVE-2026-33825 as exploited. TechGeeks action notice for Microsoft Defender local privilege escalation, with scope, remediation, investigation guidance, and official sources.
CVE-2026-45498: Microsoft Defender local denial of serviceNew!!
CISA lists CVE-2026-45498 as exploited. TechGeeks action notice for Microsoft Defender local denial of service, with scope, remediation, investigation guidance, and official sources.
CVE-2026-41091: Microsoft Malware Protection Engine privilege escalationNew!!
CISA lists CVE-2026-41091 as exploited. TechGeeks action notice for Microsoft Malware Protection Engine privilege escalation, with scope, remediation, investigation guidance, and official sources.
CVE-2010-0806: Legacy Internet Explorer use-after-free RCENew!!
CISA lists CVE-2010-0806 as exploited. TechGeeks action notice for Legacy Internet Explorer use-after-free RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2010-0249: Legacy Internet Explorer use-after-free RCENew!!
CISA lists CVE-2010-0249 as exploited. TechGeeks action notice for Legacy Internet Explorer use-after-free RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2009-1537: Legacy DirectShow QuickTime parsing RCENew!!
CISA lists CVE-2009-1537 as exploited. TechGeeks action notice for Legacy DirectShow QuickTime parsing RCE, with scope, remediation, investigation guidance, and official sources.
CVE-2008-4250: Legacy Windows Server Service RPC remote code executionNew!!
CISA lists CVE-2008-4250 as exploited. TechGeeks action notice for Legacy Windows Server Service RPC remote code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2026-45659: SharePoint authenticated remote code executionNew!!
CISA lists CVE-2026-45659 as exploited. TechGeeks action notice for SharePoint authenticated remote code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2026-50522: SharePoint unauthenticated remote code executionNew!!
CISA lists CVE-2026-50522 as exploited. TechGeeks action notice for SharePoint unauthenticated remote code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2026-58644: SharePoint unauthenticated deserialization RCENew!!
CISA lists CVE-2026-58644 as exploited. TechGeeks action notice for SharePoint unauthenticated deserialization RCE, with scope, remediation, investigation guidance, and official sources.