Everything NetSec Tribune has reported about Microsoft: 6 stories, newest first. Part of our Vulnerabilities coverage.
An authorized attacker can elevate privileges in SharePoint Server Subscription Edition before build 16.0.20326.20190 via a network-accessible flaw.
Microsoft released updates for System.Security.Cryptography.Xml to address a network-accessible denial of service vulnerability affecting multiple .NET versions.
Microsoft released updates for .NET WPF runtimes to fix a high-severity remote code execution flaw triggered by crafted pixel shaders.
A critical vulnerability in Windows Schannel allows network spoofing by unauthorized attackers. Microsoft has published an advisory for CVE-2026-105008.
An untrusted pointer dereference in Microsoft Office Word allows unauthorized attackers to execute code over a network, rated critical by NVD.
A use-after-free flaw in Windows Failover Cluster allows remote code execution, rated CVSS 9.8 by the National Vulnerability Database.