In Feb-2023, Microsoft (MS) patched a vulnerability in Microsoft Word which, if successfully exploited, could allow an attacker to execute […]

Yet another vulnerability has been reported in the Java platform, this time in the popular Java Spring framework, just a […]

In Sept 2021, Microsoft patched CVE-2021-40444, a Remote Code Execution (RCE) vulnerability in Microsoft Office applications, which was being exploited […]

In August 2021, Microsoft released a patch for Local Security Authority (LSA) Spoofing vulnerability, CVE-2021-36942. This patches one of the […]

In the first blog of the series, we discussed in-depth details about CVE-2021-26855, which is an unauthenticated Server Side Request […]