Vulnerabilities
AD FS Security Feature Bypass Vulnerability CVE-2026-69982 Disclosed
Microsoft reveals a remote authentication flaw in Active Directory Federation Services that allows attackers to bypass security controls.
Microsoft
Everything Packet Tribune has reported about Microsoft: 8 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Visual Studio Code Output Encoding Error Triggers RCE Threat in Versions Below 1.141.1
Unpatched Visual Studio Code installations risk remote code execution due to improper output encoding, rated high severity by NVD.
Vulnerabilities
.NET Uncontrolled Recursion Flaw CVE-2026-58280 Patches Available
Microsoft releases fixes for a high-severity denial of service bug in .NET runtimes across Windows, Linux and macOS platforms.
Vulnerabilities
.NET Pkcs Library Fixes CPU Exhaustion Bug Triggered by Malformed X.509 Data
Microsoft releases updates for System.Security.Cryptography.Pkcs to fix a quadratic CPU exhaustion bug triggered by malformed X.509 data.
Vulnerabilities
.NET Framework Deserialization Flaw CVE-2026-70035 in WPF Components
Microsoft releases patches for a high-severity remote code execution vulnerability in .NET Framework WPF components involving untrusted data deserialization.
Vulnerabilities
Microsoft RPC Runtime Library Critical OOB Write Vulnerability Enables Remote Code Execution
A critical vulnerability in the RPC Runtime Library permits unauthorised attackers to execute code over a network via an out-of-bounds write.
Vulnerabilities
Microsoft Failover Cluster Driver Double Free CVE-2026-96864 Enables Unauthenticated Remote Code Execution
A critical double free vulnerability in the Microsoft Failover Cluster Virtual Driver allows unauthenticated network attackers to execute arbitrary code.
Tech News
Xandr Faces Record Fine For Unlawful Grindr Data Sharing
Norway’s regulator fines Microsoft-owned Xandr $9.6M for processing sensitive user data without verified consent in ad auctions.