Opinions, tips, and news orbiting Microsoft
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69362 Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. Continue reading CVE-2026-68831 Windows Defender Firewall Service Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-83986 Windows Biometric Service Elevation of Privilege Vulnerability
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69611 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-83941 Entra ID Elevation of Privilege Vulnerability
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-70019 Windows Compressed Folder Information Disclosure Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. Continue reading CVE-2026-69599 Remote Desktop Services Remote Code Execution Vulnerability