Opinions, tips, and news orbiting Microsoft
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-69730 Windows DNS Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. Continue reading CVE-2026-69599 Remote Desktop Services Remote Code Execution Vulnerability
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-66304 Skype for Business Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in DNS Server allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-69782 Windows DNS Server Remote Code Execution Vulnerability
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-55007 Microsoft Exchange Server Remote Code Execution Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. Continue reading CVE-2026-67633 Microsoft SQL Server Denial of Service Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-68835 Windows Print Spooler Components Elevation of Privilege Vulnerability