Everything Vuln Post has reported about Microsoft: 9 stories, newest first. Part of our Vulnerabilities coverage.
Microsoft details a high-severity heap overflow in SQL Server versions up to 2022 that allows authorized attackers to elevate privileges over networks.
Microsoft SharePoint Server Subscription Edition contains a network-accessible flaw that allows authorized attackers to gain higher privileges.
A high-severity flaw in the Windows Media Video Decoder allows remote code execution. Affected Windows 10 and 11 versions require immediate updates.
Microsoft released updates for .NET Desktop Runtime to fix a network-accessible privilege escalation flaw affecting versions 8 through 11.
Microsoft has released updates for .NET WPF runtimes to fix a high-severity remote code execution vulnerability caused by unsafe data deserialization.
A high-severity out-of-bounds write flaw in .NET allows remote code execution on Windows. Patched runtimes are now available for versions 8 through 11.
High-severity remote code execution in .NET WPF allows attackers to run code via malicious XPS hyperlinks. Patches are available for versions 8 through 11.
A critical heap overflow in Microsoft's PPP EAP-TLS protocol allows unauthenticated attackers to execute code remotely over a network connection.
A high-severity code injection flaw in the Blazor WebAssembly debugger allows remote attackers to execute commands on developer workstations during debugging sessions.