Month: June 2026

Access of resource using incompatible type (‘type confusion’) in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45600 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability→

Access of resource using incompatible type (‘type confusion’) in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-47635 Microsoft Outlook and Word Remote Code Execution Vulnerability→

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45601 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Azure Stack Edge allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-41098 Azure Stack Edge Spoofing Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-47631 Microsoft Exchange Server Spoofing Vulnerability→

Integer overflow or wraparound in Windows Win32K – GRFX allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-44812 Windows Graphics Component Remote Code Execution Vulnerability→

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-47298 Microsoft SharePoint Server Remote Code Execution Vulnerability→

Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-44815 DHCP Client Service Remote Code Execution Vulnerability→