Opinions, tips, and news orbiting Microsoft
This vulnerability was found and addressed by AMD. We are documenting it in the Security Update Guide to encourage customers to install the May 2026 version of Windows as soon as possible.
The vulnerability assigned to this CVE is in certain processo… Continue reading CVE-2025-54518 AMD: CVE-2025-54518 CPU OP Cache Corruption
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-32177 .NET Elevation of Privilege Vulnerability
Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-41612 Visual Studio Code Information Disclosure Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-41610 Visual Studio Code Security Feature Bypass Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-35439 Microsoft SharePoint Server Remote Code Execution Vulnerability
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally. Continue reading CVE-2026-41102 Microsoft PowerPoint for Android Spoofing Vulnerability
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-35438 Windows Admin Center Elevation of Privilege Vulnerability
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally. Continue reading CVE-2026-41100 Microsoft 365 Copilot for Android Spoofing Vulnerability