windows

3 articles · newest first

a 9.9 in Windows Hyper-V lets an attacker break out of one VM and take the whole host's network

CVE-2026-57092 is a use-after-free in Windows VMSwitch — the virtual network switch behind Hyper-V. It scores 9.9 because it breaks out of its security boundary. If you run Hyper-V, patch it.

Priya Nair · Jul 28 · 9 min

An IT professional with a laptop beside enterprise server racks

Software

there's an unauthenticated 9.8 in Windows RDP. we've seen how this movie ends — patch before the sequel

CVE-2026-56190 lets an attacker run code on a Windows machine over Remote Desktop with no login and no clicks. It's the same profile as BlueKeep — the RDP bug that became a worm. It isn't exploited yet. 'Yet' is the word to act on.

Priya Nair · Jul 28 · 7 min

Software

the Windows Print Spooler is a security hole again. if your servers don't print, just turn it off

CVE-2026-58608 is a fresh remote code execution flaw in the same Windows service that gave us PrintNightmare. It's on by default on virtually every Windows machine — and most servers have no reason to run it at all.

Priya Nair · Jul 24 · 7 min