Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Fixes Office Flaw That Could Hack Your PC Just by Previewing a File
Microsoft’s July 2026 security update closes a critical remote code execution hole in Office that can be exploited simply by previewing a document—no double-click required. The vulnerability,...
Microsoft Word Data Leak Flaw Could Aid Attackers – Here’s How to Fix It
Microsoft shipped its July 2026 security updates on the 14th, remediating a memory-corruption oversight in Word that can spill sensitive information when a user opens a specially crafted document....
July SharePoint Patches Close Critical Auth Bypass; August Will Bring More
On July 14, 2026, Microsoft pushed out security updates that fix CVE-2026-55040, a critical authentication-bypass vulnerability in on‑premises SharePoint Server. The flaw, rated CVSS 9.1, lets a...
Urgent Office Update Closes Door on Document-Based Attacks That Could Let Hackers Hijack Your PC
On July 14, 2026, Microsoft released a critical batch of security updates for Microsoft Office, addressing a vulnerability that could allow attackers to take complete control of a system simply by...
Word RCE Vulnerability (CVE-2026-55134) Patched—But It Requires User Interaction to Exploit
Microsoft released its July 2026 security updates on July 14, fixing a high-severity remote code execution (RCE) vulnerability in Microsoft Word. Tracked as CVE-2026-55134 and rated 7.8 on the CVSS...
Last Call for SharePoint 2016 and 2019: Microsoft’s Final Patch Seals SSRF Data-Leak Risk
Microsoft shipped the July 14 security updates for SharePoint Server — and for SharePoint 2016 and 2019, they are the last. Alongside a grab-bag of fixes, the release squashes CVE-2026-55051, a...
SharePoint Admins: July 2026 Cumulative Updates Fix Spoofing XSS — Here’s Your 5-Step Patch Plan
On July 14, 2026, Microsoft released its monthly cumulative updates for on-premises SharePoint Server, and one entry demands immediate attention: CVE-2026-55126, a cross-site scripting (XSS)...
Patch Alert: Excel Vulnerability CVE-2026-55131 Lets Attackers Hijack PCs Via Simple File Open
Microsoft’s security team dropped a critical Office update on July 14, 2026 that every Excel user needs to install immediately. The patch addresses CVE-2026-55131, a heap buffer overflow...
July 2026 Office Updates Close a Stealthy Data-Exposure Bug — Here’s What to Patch
On July 14, 2026, Microsoft released its monthly security updates for Office, and buried among the fixes is a patch for an information-disclosure vulnerability that could quietly expose sensitive...
Patch Now: Microsoft Squashes Excel Memory Leak Vulnerability Across Windows, Mac, and Servers
Microsoft’s July 14, 2026 security updates address a high-severity information-disclosure flaw in Excel that could let attackers extract sensitive memory data simply by tricking someone into...
Microsoft Patches Excel Heap Overflow (CVE-2026-55053)—Immediate Update Required
On July 14, 2026, Microsoft released a security update that closes a heap-based buffer overflow in Excel, a flaw that could let attackers silently run malicious code just by convincing you to open a...
Microsoft Patches Excel Remote Code Flaw CVE-2026-55137—Here’s What You Need to Do Now
On July 14, 2026, Microsoft shipped security updates that close a heap-based buffer overflow in Excel that lets attackers hijack computers through booby-trapped spreadsheets. The vulnerability,...