Opinions, tips, and news orbiting Microsoft
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. Continue reading CVE-2026-67373 Microsoft SQL Server Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper neutralization of special elements used in an sql command (‘sql injection’) in SQL Server allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-67370 Microsoft SQL Server Elevation of Privilege Vulnerability
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack. Continue reading CVE-2026-77892 Windows Boot Manager Elevation of Privilege Vulnerability
Improper link resolution before file access (‘link following’) in SQL Server allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-67368 Microsoft SQL Server Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. Continue reading CVE-2026-77887 Windows DHCP Server Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50349 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-69674 Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability