Opinions, tips, and news orbiting Microsoft
Access of resource using incompatible type (‘type confusion’) in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55022 Microsoft Office Remote Code Execution Vulnerability
Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. Continue reading CVE-2026-50328 Windows Server Update Service (WSUS) Tampering Vulnerability
Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50451 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability
External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack. Continue reading CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
Access of resource using incompatible type (‘type confusion’) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55025 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55017 Microsoft Office Remote Code Execution Vulnerability