Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Patches Critical PowerPoint Remote Code Execution Flaw – Here’s What You Need to Do
On July 14, 2026, Microsoft pushed a critical security fix for PowerPoint as part of its monthly Patch Tuesday release. The vulnerability, tracked as CVE-2026-55043, is a heap-based buffer overflow...
Microsoft Fixes Office Memory Leak That Can Expose Sensitive Data on Windows and Mac
Microsoft shipped a security fix on July 14, 2026 that closes an information-disclosure vulnerability in Microsoft Office. The bug, logged as CVE-2026-55139, could allow a local user—or a piece of...
Opening a Crafted Document Could Leak Your Data—Microsoft’s July 14 Office Update Fixes It
On July 14, 2026, Microsoft pushed out security updates for Office that close CVE-2026-55042, a vulnerability that lets attackers extract sensitive information by tricking you into opening a...
Microsoft's July Security Update Fixes Word Bug That Could Let Attackers Execute Code — Here's How to Protect Yourself
On July 14, 2026, Microsoft released a security patch closing a heap-based buffer overflow in Microsoft Word that could hand attackers control of a victim’s machine. The vulnerability, tracked as...
CISA Urgently Flags Actively Exploited Oracle Payments Flaw—Windows Admins Must Act Now
On July 15, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) placed two vulnerabilities on its Known Exploited Vulnerabilities (KEV) catalog—confirmation that attackers are...
You Probably Patched Word Wrong: Microsoft’s July Fix for CVE-2026-55128 Needs Two Separate Checks
On July 14, 2026, Microsoft pushed out security patches that close a high-severity code execution hole in Microsoft Word—tracked as CVE-2026-55128—that could give attackers full control of your...
Microsoft Fixes Office Flaw That Could Hack Your PC Just by Previewing a File
Microsoft’s July 2026 security update closes a critical remote code execution hole in Office that can be exploited simply by previewing a document—no double-click required. The vulnerability,...
Microsoft Word Data Leak Flaw Could Aid Attackers – Here’s How to Fix It
Microsoft shipped its July 2026 security updates on the 14th, remediating a memory-corruption oversight in Word that can spill sensitive information when a user opens a specially crafted document....
July SharePoint Patches Close Critical Auth Bypass; August Will Bring More
On July 14, 2026, Microsoft pushed out security updates that fix CVE-2026-55040, a critical authentication-bypass vulnerability in on‑premises SharePoint Server. The flaw, rated CVSS 9.1, lets a...
Urgent Office Update Closes Door on Document-Based Attacks That Could Let Hackers Hijack Your PC
On July 14, 2026, Microsoft released a critical batch of security updates for Microsoft Office, addressing a vulnerability that could allow attackers to take complete control of a system simply by...
Word RCE Vulnerability (CVE-2026-55134) Patched—But It Requires User Interaction to Exploit
Microsoft released its July 2026 security updates on July 14, fixing a high-severity remote code execution (RCE) vulnerability in Microsoft Word. Tracked as CVE-2026-55134 and rated 7.8 on the CVSS...
Last Call for SharePoint 2016 and 2019: Microsoft’s Final Patch Seals SSRF Data-Leak Risk
Microsoft shipped the July 14 security updates for SharePoint Server — and for SharePoint 2016 and 2019, they are the last. Alongside a grab-bag of fixes, the release squashes CVE-2026-55051, a...