Month: May 2026

Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-35415 Windows Storage Spaces Controller Elevation of Privilege Vulnerability→

Access of resource using incompatible type (‘type confusion’) in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-40364 Microsoft Word Remote Code Execution Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-34351 Windows TCP/IP Elevation of Privilege Vulnerability→

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-40360 Microsoft Excel Information Disclosure Vulnerability→

Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-34350 Windows Storport Miniport Driver Denial of Service Vulnerability→

Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-41611 Visual Studio Code Remote Code Execution Vulnerability→

Use after free in Windows Win32K – GRFX allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-34347 Windows Win32k Elevation of Privilege Vulnerability→

Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. Continue reading CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability→