Opinions, tips, and news orbiting Microsoft
Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8 to 8.8. This is an informational change only. Customers who have success… Continue reading CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command (‘command injection’) in Azure Pipelines allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only. Continue reading CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. Continue reading CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. Continue reading CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability