Opinions, tips, and news orbiting Microsoft
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-26128 Windows SMB Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network. Continue reading CVE-2026-25188 Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-25189 Windows DWM Core Library Elevation of Privilege Vulnerability
Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-25190 GDI Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-26111 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-26105 Microsoft SharePoint Server Spoofing Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-26132 Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-26112 Microsoft Excel Remote Code Execution Vulnerability