Cert-In-Advisories

[CIVN-2026-0205] Multiple Vulnerabilities in Microsoft Products

By TeamwinPublished On: April 27, 2026

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Microsoft Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: HIGH

Software Affected

Windows 10: Versions 1607, 1809, 21H2, and 22H2.

Windows 11: Versions 23H2, 24H2, and 25H2.

Windows Server: 2012, 2012 R2, 2016, 2019, 2022, 2022 (23H2 Edition), and 2025.

Microsoft Office (various supported versions).

Microsoft Edge (Chromium-based)

Overview

Multiple vulnerabilities have been reported in Microsoft products which could allow an attacker to execute arbitrary code, elevate privileges, disclose sensitive information, or cause denial of service on the affected systems.

Target Audience:

All organizations and individuals using affected Microsoft products.

Risk Assessment:

High risk due to the potential for remote code execution, privilege escalation, information disclosure, and denial of service.

Impact Assessment:

Potential for remote code execution, privilege escalation, unauthorized disclosure of sensitive information, bypass of security protections, and disruption of system availability.

Description

These vulnerabilities exist in Microsoft products due to improper input validation, memory corruption, insufficient access control mechanisms and improper handling of objects in memory. An attacker could exploit these vulnerabilities remotely or locally depending on the attack vector, with some cases requiring user interaction (such as opening a crafted file or visiting a malicious webpage) while others may be exploited without authentication.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code in the context of the current user, escalate privileges, access sensitive information, or disrupt system availability.

Solution

Apply appropriate updates as mentioned as mentioned by the Vendor:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21515

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35431

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24303

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26150

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33819

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33102

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32210

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32172

Vendor Information

Microsoft Corporation

https://www.microsoft.com/en-in/

References