TheWindowsUpdate.com

As Xbox celebrates its 25th anniversary this year, it comes to the Game Developers Conference with more details about its next generation console, Project Helix, which is designed to play console and PC games.

“As games increasingly span devices,

The post GDC 2026: Next generation of Xbox designed to play console and PC games appeared first on Windows Experience Blog.

Continue reading GDC 2026: Next generation of Xbox designed to play console and PC games→

Access of resource using incompatible type (‘type confusion’) in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-26110 Microsoft Office Remote Code Execution Vulnerability→

[CVE-2026-26030](https://www.cve.org/CVERecord?id=CVE-2026-26030) is a Remote Code Execution vulnerability that has been identified in Microsoft Semantic Kernel Python SDK, specifically within the InMemoryVectorStore filter functionality. GitHub create… Continue reading CVE-2026-26030 GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable→

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-26109 Microsoft Excel Remote Code Execution Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-26144 Microsoft Excel Information Disclosure Vulnerability→

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-23654 GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability→

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-23661 Azure IoT Explorer Information Disclosure Vulnerability→

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-23662 Azure IoT Explorer Information Disclosure Vulnerability→