Month: May 2026

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-33837 Windows TCP/IP Local Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-40362 Microsoft Excel Remote Code Execution Vulnerability→

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-33835 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability→

Improper neutralization of special elements in output used by a downstream component (‘injection’) in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-33833 Azure Machine Learning Notebook Spoofing Vulnerability→

Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally. Continue reading CVE-2026-42832 Microsoft Office Spoofing Vulnerability→

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-33112 Microsoft SharePoint Server Remote Code Execution Vulnerability→

Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability→

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-33110 Microsoft SharePoint Server Remote Code Execution Vulnerability→