BeyondTrust’s 13th annual Microsoft Vulnerabilities Report, released April 21, 2026, says Microsoft disclosed 1,273 vulnerabilities across its software ecosystem in 2025, down 6 percent from 2024, while critical flaws doubled from 78 to 157 across Windows, Office, Azure, Dynamics 365, Edge, and...
Microsoft has published CVE-2026-42823 as an Azure Logic Apps elevation-of-privilege vulnerability in its Security Update Guide on May 12, 2026, identifying the affected cloud automation service rather than a traditional Windows client or server component. The sparse public wording is the story...
Microsoft’s attempt to make privilege elevation in Windows 11 a true security boundary ran into a harsh reality check: decades of legacy kernel behavior are hard to rewrite safely. Google Project Zero’s James Forshaw exposed multiple privilege‑escalation bypasses against the new Administrator...