Opinions, tips, and news orbiting Microsoft
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50361 Microsoft Brokering File System Elevation of Privilege Vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50434 Windows Push Notification Information Disclosure Vulnerability
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50307 Windows TCP/IP Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows App Installer allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability