Opinions, tips, and news orbiting Microsoft
Access of resource using incompatible type (‘type confusion’) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. Continue reading CVE-2026-62790 Windows SMBv3 Server Remote Code Execution Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. Continue reading CVE-2026-62786 Win32k Information Disclosure Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-62781 RPC Runtime Library Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62780 Windows Kernel Elevation of Privilege Vulnerability