Vulnerabilities
Microsoft SQL Server Heap Overflow Enables Remote Privilege Escalation
A high-severity flaw in SQL Server allows authorized users to elevate privileges via a heap-based buffer overflow, affecting multiple supported versions.
Microsoft
Everything Firewall Chronicle has reported about Microsoft: 5 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Microsoft Patches .NET WPF Flaw Letting Attackers Execute Code Via Malicious XPS Hyperlinks on Windows
Microsoft patches a high-severity remote code execution flaw in .NET WPF that lets attackers bypass URI restrictions through crafted hyperlinks.
Vulnerabilities
CVE-2026-69634 Critical iSCSI Buffer Overflow in Windows
A heap-based buffer overflow in Windows iSCSI allows remote code execution by unauthorized attackers, rated CVSS 9.8 by the NVD.
Vulnerabilities
ASP.NET Core Kestrel HTTP Request Smuggling Flaw CVE-2026-88092 Enables Network Tampering via Aborted Connections
Microsoft patches a critical HTTP request smuggling vulnerability in ASP.NET Core 8 through 11, enabling network tampering via aborted Kestrel connections.
Vulnerabilities
Microsoft Partner Center Certificate Validation Bug Lets Network Attackers Elevate Privileges
A critical certificate validation error in Microsoft Partner Center allows network-based attackers to elevate privileges without proper authorization.