Opinions, tips, and news orbiting Microsoft
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-26113 Microsoft Office Remote Code Execution Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-26105 Microsoft SharePoint Server Spoofing Vulnerability
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-26111 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-24287 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-25167 Microsoft Brokering File System Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-25180 Windows Graphics Component Information Disclosure Vulnerability
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-26134 Microsoft Office Elevation of Privilege Vulnerability