Opinions, tips, and news orbiting Microsoft
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. Continue reading CVE-2026-96865 Windows Secure Kernel Mode Information Disclosure Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-102865 Microsoft Office SharePoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-105595 Microsoft Office Access Remote Code Execution Vulnerability
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. Continue reading CVE-2026-96855 Windows Modern Device Management (MDM) Tampering Vulnerability
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-88155 Microsoft Office SharePoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-70302 Microsoft Office Word Remote Code Execution Vulnerability