Month: February 2026

Improper input validation in Power BI allows an authorized attacker to execute code over a network. Continue reading CVE-2026-21229 Power BI Remote Code Execution Vulnerability→

Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21508 Windows Storage Elevation of Privilege Vulnerability→

Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network. Continue reading CVE-2026-21523 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability→

Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-21255 Windows Hyper-V Security Feature Bypass Vulnerability→

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-21518 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability→

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-21218 .NET Spoofing Vulnerability→

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-20846 GDI+ Denial of Service Vulnerability→