Opinions, tips, and news orbiting Microsoft
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. Continue reading CVE-2026-49799 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack. Continue reading CVE-2026-50299 Windows Storage Spaces Direct Remote Code Execution Vulnerability
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-49797 Windows NTFS Remote Code Execution Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49795 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. Continue reading CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability