Vulnerabilities
CVE-2026-70014: Windows Cryptographic Services Remote Code Execution Exploit
Microsoft has identified a critical remote code execution flaw (CVE-2026-70014) in Windows Cryptographic Services that can be triggered by an authenticated attacker over the network. The use‑after‑free bug allows arbitrary code execution with service privileges on Windows 10, 11 and Server 2016‑2022. Apply the latest security update and restrict network access to mitigate the risk.
What happened
Microsoft disclosed a remote code execution flaw in Windows Cryptographic Services (CVE-2026-70014). The bug is a use‑after‑free that can be triggered by an authenticated attacker sending a crafted request over the network.
Impact
When exploited, the flaw allows the attacker to execute arbitrary code with the privileges of the Cryptographic Services process. Systems running Windows 10, Windows 11, and Windows Server 2016‑2022 are affected. The vulnerability is rated CVSS 9.8 (Critical).
What to do
- Apply the security update released by Microsoft as soon as possible.
- Restrict network access to the Cryptographic Services endpoint and enforce least‑privilege authentication.
- Enable logging for cryptographic service calls and monitor for anomalous traffic.
- Verify that the update has been installed by checking the registry key HKLM\\Software\\Microsoft\\Cryptography\\CurrentVersion.
Mitigation
Until the patch is applied, the only practical mitigation is to block inbound traffic to the Cryptographic Services port (default 445) from untrusted networks.
Related vulnerabilities
CVE‑2026‑62819: Remote Code Execution in Windows RRAS Service
Microsoft has identified a remote code execution flaw in the Routing and Remote Access Service (RRAS) that could allow attackers to execute arbitrary code on affected Windows Server systems. The vulnerability is present in Windows Server 2012 R2 through 2022 and requires immediate patching or service disablement.
Read briefing
OpenOffice Versions <4.1.17 Vulnerable to Remote Code Execution (CVE‑2026‑59265, CVE‑2026‑63277)
Multiple CVEs have been identified in OpenOffice versions older than 4.1.17 that enable remote code execution. The flaws allow an attacker to trigger arbitrary code on a target system via crafted documents. Defenders must apply the vendor’s patches immediately or upgrade to a supported release.
Read briefing
Wärtsilä FOS‑Onboard Faces Dual Hard‑Coded Key Vulnerabilities (CVE‑2026‑78225, CVE‑2026‑81855)
Two critical CVEs expose hard‑coded cryptographic keys in Wärtsilä FOS‑Onboard 5.07.0923.01, allowing attackers to push unauthorized updates, execute code or steal credentials. With a CVSS score of 9.1, the flaws threaten transportation‑system operators worldwide. Wärtsilä has released a patch; users must contact the vendor to apply it immediately.
Read briefing
Chromium CVE-2026-95324: Uninitialized GPU Resource Vulnerability
A flaw in Chromium’s GPU handling allows an attacker to exploit an uninitialized resource, potentially leading to memory corruption or arbitrary code execution. Microsoft Edge, built on Chromium, incorporates the same fix, so updating to the latest Edge version mitigates the risk. Defenders should verify Edge is current and monitor GPU activity for anomalies.
Read briefing