Opinions, tips, and news orbiting Microsoft
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-70130 Microsoft Office Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-68817 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-68812 Microsoft Excel Remote Code Execution Vulnerability