Opinions, tips, and news orbiting Microsoft
Improper neutralization of special elements used in a command (‘command injection’) in Windows Snipping Tool allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-32183 Windows Snipping Tool Remote Code Execution Vulnerability
Improper neutralization of special elements used in an sql command (‘sql injection’) in SQL Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-32167 SQL Server Elevation of Privilege Vulnerability
Information published. Continue reading CVE-2026-31418 netfilter: ipset: drop logically empty buckets in mtype_del
Information published. Continue reading CVE-2025-11839 GNU Binutils prdbg.c tg_tag_type return value
Information published. Continue reading CVE-2025-1148 GNU Binutils ld ldelfgen.c link_order_scan memory leak
Information published. Continue reading CVE-2025-1147 GNU Binutils nm nm.c internal_strlen buffer overflow