Topic: office vulnerabilities

  • Critical Windows 0-Day Fixed: CISA Issues Urgent Alert

    Critical Windows 0-Day Fixed: CISA Issues Urgent Alert

    A critical Windows zero-day vulnerability (CVE-2026-20805) is being actively exploited, prompting urgent patching and a CISA mandate for federal agencies to apply the fix by February 3. The flaw undermines the ASLR security mechanism by leaking a memory address, which can be chained with other bu...

    Read More »
  • Microsoft Fixes 3 Actively Exploited Zero-Day Vulnerabilities

    Microsoft Fixes 3 Actively Exploited Zero-Day Vulnerabilities

    Microsoft patched three actively exploited zero-day vulnerabilities in its October 2025 Patch Tuesday, including flaws in a pre-installed modem driver, Windows Remote Access Connection Manager, and IGEL OS, requiring immediate updates. The vulnerabilities enable attackers to escalate privileges t...

    Read More »