confidence metric

  1. CVE-2026-26133: Microsoft 365 Copilot Information Disclosure and the Confidence Signal

    Microsoft’s security tracking lists CVE-2026-26133 as an information‑disclosure defect affecting Microsoft 365 Copilot, but public technical detail is intentionally sparse and Microsoft’s own “confidence” metadata is the primary triage signal available to defenders right now. The entry in the...
  2. CVE-2026-20870: Win32k Kernel Elevation of Privilege and Patch Guidance

    Microsoft’s public advisory for CVE-2026-20870 describes a high‑impact elevation‑of‑privilege defect in the Windows Win32k kernel subsystem that can be triggered by a local, authenticated actor and that Microsoft treats with a measured disclosure posture using its published confidence metric...