Opinions, tips, and news orbiting Microsoft
External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-47643 Azure Stack Edge Remote Code Execution Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-47639 Microsoft SharePoint Server Spoofing Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-47293 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-47638 Microsoft SharePoint Server Spoofing Vulnerability
Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally. Continue reading CVE-2026-45606 Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-47637 Microsoft SharePoint Server Spoofing Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45603 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-47636 Microsoft SharePoint Server Spoofing Vulnerability