Vulnerabilities
Verify Windows RPC Patches Now to Block High-Severity Remote Code Execution Flaw
A type confusion flaw in Microsoft RPC Runtime allows network-based remote code execution, rated 8.8 CVSS, affecting multiple Windows versions.
Microsoft
Everything Shell Bulletin has reported about Microsoft: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Update .NET 8-11 on Linux/macOS to fix CVE-2026-96231 local privilege escalation
Microsoft releases updates for CVE-2026-96231, a high-severity flaw in .NET runtimes that allows local attackers to gain elevated system privileges.
Vulnerabilities
Update .NET 8-11 Now: SignalR Flaw CVE-2026-70159 Lets Attackers Crash Servers via Resource Exhaustion
Microsoft releases fixes for a resource exhaustion flaw in ASP.NET Core SignalR that allows remote attackers to deny service.
Vulnerabilities
Patch BitLocker flaws to stop physical access attacks and privilege escalation
Microsoft resolved three BitLocker issues in October 2026 updates, closing paths for open redirects, race conditions, and out-of-bounds reads that grant extra system rights.
Vulnerabilities
Apply Microsoft patches for ASP.NET Core 8-11 to stop HTTP request smuggling across Windows, Linux, and macOS
Microsoft patches a critical vulnerability in ASP.NET Core versions 8 through 11 that allows unauthorized network tampering via HTTP request smuggling.
Vulnerabilities
Urgent: Patch Windows 10/11 to Fix Critical CVE-2026-102210 Text Shaping Heap Overflow
A critical heap overflow in Windows Text Shaping allows remote attackers to run code on affected devices without authentication.