Month: February 2026

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21246 Windows Graphics Component Elevation of Privilege Vulnerability→

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-21261 Microsoft Excel Information Disclosure Vulnerability→

Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability→

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-21259 Microsoft Excel Elevation of Privilege Vulnerability→

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-21258 Microsoft Excel Information Disclosure Vulnerability→

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Continue reading CVE-2026-21248 Windows Hyper-V Remote Code Execution Vulnerability→

Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-21260 Microsoft Outlook Spoofing Vulnerability→

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability→