Opinions, tips, and news orbiting Microsoft
Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability
Improper link resolution before file access (‘link following’) in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55949 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Continue reading CVE-2026-50494 Windows NTFS Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50394 Windows Media Information Disclosure Vulnerability
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50457 Windows Runtime Elevation of Privilege Vulnerability