Opinions, tips, and news orbiting Microsoft
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-54988 Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-50420 HTTP.sys Information Disclosure Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-50678 Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. Continue reading CVE-2026-50453 Windows USB Audio Class Driver Information Disclosure Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-50675 Microsoft Excel Remote Code Execution Vulnerability
Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. Continue reading CVE-2026-50432 Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability
External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability