Author Archives: Syndicated News

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-69371 Windows Overlay Filter Elevation of Privilege Vulnerability→

Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network. Continue reading CVE-2026-66308 Skype for Business and Lync Denial of Service Vulnerability→

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-70019 Windows Compressed Folder Information Disclosure Vulnerability→

Improper link resolution before file access (‘link following’) in Windows NTFS allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69379 Windows NTFS Elevation of Privilege Vulnerability→

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-77909 Azure CycleCloud Information Disclosure Vulnerability→

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50349 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. Continue reading CVE-2026-69367 Microsoft Standard XPS Information Disclosure Vulnerability→