Opinions, tips, and news orbiting Microsoft
Improper link resolution before file access (‘link following’) in Windows Management Services allows an authorized attacker to deny service locally. Continue reading CVE-2026-70348 Windows Management Services Denial of Service Vulnerability
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-70328 Microsoft Excel Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-70311 Microsoft Office Word Remote Code Execution Vulnerability
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally. Continue reading CVE-2026-61928 Windows Hello Tampering Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-63524 Microsoft Office Information Disclosure Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability