Opinions, tips, and news orbiting Microsoft
Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-34340 Windows Projected File System Elevation of Privilege Vulnerability
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-41086 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
Null pointer dereference in Windows LDAP – Lightweight Directory Access Protocol allows an authorized attacker to deny service locally. Continue reading CVE-2026-34339 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-34338 Windows Telephony Service Elevation of Privilege Vulnerability
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network. Continue reading CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-34337 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-40402 Windows Hyper-V Elevation of Privilege Vulnerability