Everything RedTeam Tribune has reported about Microsoft: 10 stories, newest first. Part of our Vulnerabilities coverage.
AI-driven vulnerability discovery has led to a sharp rise in patch failures, with nearly one in forty GitHub fixes requiring follow-up advisories within 90 days.
A cryptographic vulnerability in Windows Remote Desktop allows attackers to bypass security features, complicating recent update issues for managed devices.
Microsoft confirms a high-severity flaw in SharePoint that lets authenticated users elevate privileges over the network, impacting Subscription Edition versions.
Microsoft confirms a high-severity type confusion vulnerability in .NET that allows unauthorized network attackers to elevate privileges.
An authorized attacker can exploit improper link resolution in .NET to elevate privileges locally on Linux and macOS systems running affected runtime versions.
Microsoft patches a high-severity vulnerability in .NET WPF that allows attackers to run arbitrary code if users engage with crafted content.
Microsoft patches high-severity heap corruption flaw in .NET WPF runtime that enables remote attackers to execute code via crafted pixel-shader bytecode.
A high-severity deserialization flaw in .NET WPF lets attackers run code on Windows systems if a user interacts with a crafted link.
A critical buffer overflow in Network Policy Server lets attackers run code remotely on affected Windows versions without prior authentication.
An unauthorized attacker can execute code over a network via a critical use-after-free vulnerability in the Microsoft QUIC protocol on multiple Windows 11 versions.