Month: August 2026

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. Continue reading CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability→

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. Continue reading CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability→

Improper link resolution before file access (‘link following’) in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally. Continue reading CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability→

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. Continue reading CVE-2026-61361 Windows DHCP Client Remote Code Execution Vulnerability→

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-70346 Windows Installer Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability→

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. Continue reading CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability→