Opinions, tips, and news orbiting Microsoft
Improper link resolution before file access (‘link following’) in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. Continue reading CVE-2026-49180 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Wireless Networking allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58628 Windows Wireless Network Manager Elevation of Privilege Vulnerability
Improper link resolution before file access (‘link following’) in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-50665 Microsoft Office Information Disclosure Vulnerability
Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50402 NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-56186 Windows Secure Channel Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55949 Microsoft Excel Remote Code Execution Vulnerability
Incorrect access of indexable resource (‘range error’) in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability