Opinions, tips, and news orbiting Microsoft
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. Continue reading CVE-2026-35419 Windows DWM Core Library Information Disclosure Vulnerability
Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-40406 Windows TCP/IP Information Disclosure Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-35418 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-40399 Windows TCP/IP Elevation of Privilege Vulnerability
Access of resource using incompatible type (‘type confusion’) in Windows Win32K – ICOMP allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-35417 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-35416 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-40368 Microsoft SharePoint Server Remote Code Execution Vulnerability