Opinions, tips, and news orbiting Microsoft
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-66306 Skype for Business Information Disclosure Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-67381 Microsoft SQL Server Elevation of Privilege Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-68780 Microsoft SQL Server Information Disclosure Vulnerability
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. Continue reading CVE-2026-68831 Windows Defender Firewall Service Information Disclosure Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-69347 Windows Fast FAT Driver Remote Code Execution Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-69305 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69513 Windows Error Reporting Elevation of Privilege Vulnerability