A crafty alteration to a VM disk header can make a guest VM read sensitive host files — that is the practical risk discovered in CVE-2026-27211, a high‑severity information‑disclosure flaw in Cloud Hypervisor that reintroduces a long‑standing class of image‑format parsing problems into modern...
Microsoft’s own Security Update Guide lists a new vulnerability tracked as CVE-2025-53766, described as a heap-based buffer overflow in GDI+ that could allow remote code execution over a network, but independent public records and third‑party databases were not uniformly available at the time of...
