Opinions, tips, and news orbiting Microsoft
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. Continue reading CVE-2026-69345 Microsoft Standard XPS Information Disclosure Vulnerability
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-77899 Windows Security Center Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-69347 Windows Fast FAT Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-69285 Microsoft Office Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-69338 Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Installer allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-77894 Windows Installer Elevation of Privilege Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. Continue reading CVE-2026-69339 Windows MIDI Service Module Information Disclosure Vulnerability
Access of resource using incompatible type (‘type confusion’) in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-77889 Windows DHCP Server Denial of Service Vulnerability