Opinions, tips, and news orbiting Microsoft
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. Continue reading CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally. Continue reading CVE-2026-57973 Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability
Access of resource using incompatible type (‘type confusion’) in .NET Core allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-57108 .NET Denial of Service Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-57101 Visual Studio Code Security Feature Bypass Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. Continue reading CVE-2026-57085 Windows Print Spooler Information Disclosure Vulnerability