Opinions, tips, and news orbiting Microsoft
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. Continue reading CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62811 Windows HTTP.sys Elevation of Privilege Vulnerability
Improper input validation in Power BI allows an authorized attacker to execute code over a network. Continue reading CVE-2026-65811 Power BI Remote Code Execution Vulnerability
Improper link resolution before file access (‘link following’) in Windows DHCP Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62803 Windows DHCP Server Elevation of Privilege Vulnerability
Access of resource using incompatible type (‘type confusion’) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability