Opinions, tips, and news orbiting Microsoft
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-70317 Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-61921 Windows Remote Desktop Client Information Disclosure Vulnerability
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62770 Windows Shell Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Information published. Continue reading CVE-2024-57795 RDMA/rxe: Remove the direct link to net_device