Opinions, tips, and news orbiting Microsoft
Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-50360 Windows SMB Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Access of resource using incompatible type (‘type confusion’) in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55022 Microsoft Office Remote Code Execution Vulnerability
Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Continue reading CVE-2026-50482 Windows NTFS Remote Code Execution Vulnerability
Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack. Continue reading CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55039 Microsoft Excel Remote Code Execution Vulnerability