HID: steam: Clean up locking
CVE-2026-98943
Summary
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Products covered
Microsoft Office for Android
Microsoft Office LTSC for Mac 2021
Microsoft Office LTSC for Mac 2024
Microsoft Office 365 for Mac
Remediation
Release Notes
Vendor-listed fixes
16.0.20430.20000
16.112.26090911
CVEs in this advisory 1
Update history
What changed in later vendor updates
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
- Added affected products: Microsoft Office 365 for Mac, Microsoft Office for Android, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024.
- Removed affected products: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for....
- Added fixed versions: 16.0.20430.20000, 16.112.26090911.
- Removed fixed versions: 6.2.9200.26349, 6.3.9600.23398, 10.0.14393.9512, 10.0.17763.9245, 10.0.19044.7725.
- The vendor changed its remediation guidance.
- The vendor changed the advisory's last-updated date.
- The vendor changed the advisory's last-updated date.
- Added fixed versions: 6.3.9600.23398.
- Removed fixed versions: 6.3.9600.23397.
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Updated by Microsoft Security Response Center
The vendor changed the advisory after it was first published.
- Confirmed at the source
Our collector saw this advisory during a later source check.