Opinions, tips, and news orbiting Microsoft
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-47292 Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability
Access of resource using incompatible type (‘type confusion’) in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-45458 Microsoft Outlook and Word Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-45469 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Continue reading CVE-2026-50507 Windows BitLocker Security Feature Bypass Vulnerability
Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network. Continue reading CVE-2026-47288 Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-45484 Microsoft SharePoint Elevation of Privilege Vulnerability