Month: February 2026

User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-21527 Microsoft Exchange Server Spoofing Vulnerability→

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Continue reading CVE-2026-21244 Windows Hyper-V Remote Code Execution Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in Azure Compute Gallery allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability→

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21250 Windows HTTP.sys Elevation of Privilege Vulnerability→

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability→

Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21253 Mailslot File System Elevation of Privilege Vulnerability→

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-21257 GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability→