Opinions, tips, and news orbiting Microsoft
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability
The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release. Microsoft recommends updating to the most current release of the SharePoint server. Continue reading CVE-2026-97783 Microsoft Office SharePoint Spoofing Vulnerability
Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-83709 Windows NTLM Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-70074 Windows DNS Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-83839 Windows Hyper-V Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
Updated CVE to relect that this vulnerability is in the Windows Subsystem for Linux product. Microsoft recommends that customer using this product should install the latest version to be protected. Continue reading CVE-2026-102204 Windows Subsystem for Linux Elevation of Privilege Vulnerability