Opinions, tips, and news orbiting Microsoft
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-53741 Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-53730 Microsoft Office Visio Remote Code Execution Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2025-53760 Microsoft SharePoint Elevation of Privilege Vulnerability
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-53759 Microsoft Excel Remote Code Execution Vulnerability
Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a network. Continue reading CVE-2025-50172 DirectX Graphics Kernel Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network. Continue reading CVE-2025-53722 Windows Remote Desktop Services Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows DirectX allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53135 DirectX Graphics Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-53131 Windows Media Remote Code Execution Vulnerability