Opinions, tips, and news orbiting Microsoft
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-66305 Skype for Business Spoofing Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-70582 Windows Management Instrumentation Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network. Continue reading CVE-2026-62759 Windows Netlogon Spoofing Vulnerability
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69584 Windows USB Video Driver Elevation of Privilege Vulnerability
Improper link resolution before file access (‘link following’) in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-83999 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-69493 Windows Event Logging Service Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory (‘path traversal’) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-78461 Visual Studio Code Security Feature Bypass Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability