CyberWatch Newsroom Live Intel

Moderate CVE-2026-72938 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-72938 Microsoft Office PowerPoint Information Disclosure Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Important CVE-2026-70200 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-70200 Azure Logic Apps Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Important CVE-2026-70009 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-70009 Azure Arc Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Important CVE-2026-69865 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Important CVE-2026-69843 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69843 Microsoft Fabric Elevation of Privilege Vulnerability

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Critical CVE-2026-69797 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69797 Microsoft Office PowerPoint Remote Code Execution Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-69767 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-69759 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69759 Microsoft Office Word Remote Code Execution Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Moderate CVE-2026-69739 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69739 Microsoft Office Information Disclosure Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Moderate CVE-2026-69734 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69734 Microsoft Office Word Information Disclosure Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-69724 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability

Updated an acknowledgement. This is an informational change only.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-69722 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69722 Microsoft Office Word Remote Code Execution Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Moderate CVE-2026-69719 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-69686 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69686 Microsoft Office Word Remote Code Execution Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-69678 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-69671 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69671 Microsoft Office Word Remote Code Execution Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-69632 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69632 Microsoft Office Remote Code Execution Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Moderate CVE-2026-69626 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69626 Microsoft Office Information Disclosure Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Important CVE-2026-69399 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-69399 Azure Arc Elevation of Privilege Vulnerability

Information published.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Critical CVE-2026-68794 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-68794 Microsoft Excel Remote Code Execution Vulnerability

Updated an acknowledgement. This is an informational change only.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Moderate CVE-2026-68791 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-68791 Azure Machine Learning Information Disclosure Vulnerability

Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Moderate CVE-2026-66809 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-66809 Microsoft Office Graphics Component Information Disclosure Vulnerability

Updated an acknowledgement. This is an informational change only.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Important CVE-2026-62874 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-62874 Azure Billing Elevation of Privilege Vulnerability

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Critical CVE-2026-62819 Microsoft MSRC

2026-09-17 Microsoft MSRC

CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Updated an acknowledgement. This is an informational change only.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Windows

Advisory