Month: May 2026

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-40359 Microsoft Excel Remote Code Execution Vulnerability→

Execution with unnecessary privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. Continue reading CVE-2026-42833 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability→

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-40358 Microsoft Office Remote Code Execution Vulnerability→

Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-42830 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability→

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-40357 Microsoft SharePoint Server Remote Code Execution Vulnerability→

Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-41613 Visual Studio Code Elevation of Privilege Vulnerability→

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-34341 Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability→

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability→