Opinions, tips, and news orbiting Microsoft
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-45460 Microsoft Office Information Disclosure Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network. Continue reading CVE-2026-42904 Windows TCP/IP Elevation of Privilege Vulnerability
Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-42902 Microsoft PowerToys Elevation of Privilege Vulnerability
Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-42837 Windows Projected File System Elevation of Privilege Vulnerability
Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45487 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-45475 Microsoft Office Remote Code Execution Vulnerability
Improper link resolution before file access (‘link following’) in .NET allows an unauthorized attacker to perform tampering locally. Continue reading CVE-2026-45491 .NET Tampering Vulnerability