Vulnerability (CVE)
Huntress disclosed an unpatched flaw in the Windows "search:" URI handler that leaks a user's NTLMv2 hash, using "search:" and "crumb=location:" parameters in place of the "filePath" parameter that drove CVE-2026-33829 in the Snipping Tool, which Microsoft...
Microsoft's December Patch Tuesday contained 33 vulnerabilities, its lowest count since December 2019, with no zero-days disclosed after a year in which 10 monthly advisories included an actively exploited flaw. Four critical vulnerabilities were patched,...
Microsoft released its final Patch Tuesday of 2023 with a relatively small number of security fixes and no known zero-day threats targeting the December batch. Four updates address critical vulnerabilities, including CVE-2023-35628 in MSHTML, which...