Month: August 2026

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-65661 Microsoft Office Remote Code Execution Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows DNS allows an authorized attacker to execute code over a network. Continue reading CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability→

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability→

Improper link resolution before file access (‘link following’) in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-65656 Microsoft Office Remote Code Execution Vulnerability→

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability→

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability→