Vulnerabilities
Windows Volume Manager Driver Heap Overflow Enables Network Code Execution
An unauthorised attacker can trigger a heap buffer overflow in the Windows Volume Manager Extension Driver to run remote code, rated critical.
Microsoft
Everything Payload Report has reported about Microsoft: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Microsoft PowerPoint Use-After-Free CVE-2026-88178 Enables Network Code Execution, Scored 9.8
A critical vulnerability in PowerPoint allows network-based code execution, rated 9.8 by the National Vulnerability Database.
Vulnerabilities
Windows Shell command injection flaw CVE-2026-96951 bypasses MOTW
Attackers exploited this zero-day to circumvent Windows Shell protections via social engineering, Microsoft says.