Opinions, tips, and news orbiting Microsoft
Improper control of generation of code (‘code injection’) in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45596 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-26142 Nuance PowerScribe Remote Code Execution Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45598 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-50508 Windows NTLM Spoofing Vulnerability
Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-45599 Windows UPnP Device Host Remote Code Execution Vulnerability
Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-49161 Microsoft PC Manager Security Feature Bypass Vulnerability
No cwe for this issue in Windows Kernel allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2025-10263 ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]