Opinions, tips, and news orbiting Microsoft
Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network. Continue reading CVE-2026-40400 Windows PowerShell Remote Code Execution Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. Continue reading CVE-2026-41087 Windows File Explorer Information Disclosure Vulnerability
Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally. Continue reading CVE-2026-40422 Windows File Explorer Information Disclosure Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-55008 Microsoft Exchange Server Spoofing Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-55121 Microsoft Office Information Disclosure Vulnerability
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability