Opinions, tips, and news orbiting Microsoft
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-83983 Windows Biometric Service Elevation of Privilege Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. Continue reading CVE-2026-69599 Remote Desktop Services Remote Code Execution Vulnerability
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-66304 Skype for Business Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in DNS Server allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-69782 Windows DNS Server Remote Code Execution Vulnerability
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-55007 Microsoft Exchange Server Remote Code Execution Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. Continue reading CVE-2026-67633 Microsoft SQL Server Denial of Service Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-68835 Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-68897 Microsoft Standard XPS Elevation of Privilege Vulnerability