Opinions, tips, and news orbiting Microsoft
Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally. Continue reading CVE-2026-45606 Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-47637 Microsoft SharePoint Server Spoofing Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45603 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-47636 Microsoft SharePoint Server Spoofing Vulnerability
Access of resource using incompatible type (‘type confusion’) in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45600 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Access of resource using incompatible type (‘type confusion’) in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-47635 Microsoft Outlook and Word Remote Code Execution Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45601 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Azure Stack Edge allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-41098 Azure Stack Edge Spoofing Vulnerability