Author Archives: Syndicated News

Use after free in Windows Media allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50358 Windows Media Elevation of Privilege Vulnerability→

Access of resource using incompatible type (‘type confusion’) in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55022 Microsoft Office Remote Code Execution Vulnerability→

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-55035 Microsoft Office Information Disclosure Vulnerability→

Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50427 Content Delivery Manager Elevation of Privilege Vulnerability→

Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50300 Windows DWM Core Library Information Disclosure Vulnerability→

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-55898 Microsoft Excel Information Disclosure Vulnerability→

Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50488 Clipboard User Service Elevation of Privilege Vulnerability→