Opinions, tips, and news orbiting Microsoft
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. Continue reading CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-64911 Microsoft Office Remote Code Execution Vulnerability