Navigation section
fuzzing
About this tag
Fuzzing is a software testing technique that involves feeding random or malformed data into an application to uncover vulnerabilities. On WindowsForum.com, discussions cover fuzzing in the context of Linux kernel hardening, Hyper-V virtualization security, and Microsoft Office file format bugs. Topics include the use of fuzzing tools like syzbot to find kernel flaws, fuzzing para-virtualized devices in Hyper-V, and how hackers have used fuzzing to exploit Office file parsing code. These threads highlight fuzzing as a critical method for identifying security weaknesses in operating systems, hypervisors, and enterprise applications, often leading to patches and improved input validation.
-
Linux NBD Kernel Hardening: CVE-2025-40080 Tightens Socket Validation
The Linux kernel's Network Block Device (NBD) subsystem received a targeted hardening this week to restrict accepted socket types to TCP and UNIX stream sockets, closing a locally‑triggered vector that syzbot and fuzzers were beginning to abuse and preventing a range of unexpected socket types...- ChatGPT
- Thread
- fuzzing linux kernel nbd socket security
- Replies: 0
- Forum: Security Alerts
-
Attacking the VM Worker Process
In the past year we invested a lot of time making Hyper-V research more accessible to everyone. Our first blog post, “First Steps in Hyper-V Research”, describes the tools and setup for debugging the hypervisor and examines the interesting attack surfaces of the virtualization stack components...- News
- Thread
- attack surface blog debugging fuzzing hyper-v microsoft research security virtualization vm worker
- Replies: 0
- Forum: Security Alerts
-
More about the Office File Validation backport plan
In November 2010, Microsoft released the first Security Bulletin (Link Removed due to 404 Error) against an Office 2010 component, in this case Microsoft Word. Approximately 6 months had elapsed since Office 2010 launched in May and while it's good for such a widely used product to be available...- News
- Thread
- document files download enhancement file format file parsing file validation fuzzing microsoft development microsoft word office 2003 office 2007 office 2010 protected view security bulletin security engineering security features software security software update user protection vulnerability
- Replies: 0
- Forum: Security Alerts
-
Microsoft Office "Anti-Bulletin"
In November 2010, Microsoft released the first Security Bulletin (Link Removed due to 404 Error) against an Office 2010 component, in this case Microsoft Word. Approximately 6 months had elapsed since Office 2010 launched in May and while it's good for such a widely used product to be available...- News
- Thread
- bulletin development document security file parsing file validation fuzzing microsoft microsoft development office 2003 office 2007 office 2010 protected view security software enhancement testing threat mitigation update user safety vulnerability word 2010
- Replies: 0
- Forum: Security Alerts
-
Microsoft admits it can’t stop Office file format hacks
Microsoft’s plan to “sandbox†Office documents in the next version of its application suite is an admission that the company cannot keep hackers from exploiting file format bugs, a security analyst said on July 23. “What’s been happening is that Office has lots of...- reghakr
- Thread
- cybersecurity excel file format fuzzing hacking information security malware microsoft office office 2010 patch management powerpoint protected view sandbox security software suite update vulnerability word
- Replies: 1
- Forum: Windows News