Opinions, tips, and news orbiting Microsoft
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-102235 Visual Studio Code Remote Code Execution Vulnerability
Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-102234 Visual Studio Code Security Feature Bypass Vulnerability
Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-97749 Microsoft Office Outlook Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-70172 Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. Continue reading CVE-2026-70112 Windows Spaceport.sys Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-88155 Microsoft Office SharePoint Remote Code Execution Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-70023 Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability