<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: Microsoft Windows</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/microsoft-windows.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-96951: Microsoft Windows Command Injection Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-96951/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-96951/</guid><pubDate>Tue, 13 Oct 2026 19:01:26 +0000</pubDate><description>Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.</description></item><item><title>CVE-2026-81963: Microsoft Windows Link Following Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-81963/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-81963/</guid><pubDate>Tue, 08 Sep 2026 17:19:13 +0000</pubDate><description>Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.</description></item><item><title>CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-85880/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-85880/</guid><pubDate>Tue, 08 Sep 2026 17:14:21 +0000</pubDate><description>Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.</description></item><item><title>CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-68820/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-68820/</guid><pubDate>Tue, 11 Aug 2026 17:05:15 +0000</pubDate><description>Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.</description></item><item><title>CVE-2008-4250: Microsoft Windows Buffer Overflow Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2008-4250/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2008-4250/</guid><pubDate>Wed, 20 May 2026 00:00:00 +0000</pubDate><description>Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.</description></item></channel></rss>
