Opinions, tips, and news orbiting Microsoft
Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-34350 Windows Storport Miniport Driver Denial of Service Vulnerability
Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-41611 Visual Studio Code Remote Code Execution Vulnerability
Use after free in Windows Win32K – GRFX allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-34347 Windows Win32k Elevation of Privilege Vulnerability
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. Continue reading CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-34345 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Improper control of generation of code (‘code injection’) in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-41094 Microsoft Data Formulator Remote Code Execution Vulnerability
Access of resource using incompatible type (‘type confusion’) in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-34344 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-40419 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability