Neowin News Feed for: Eop

Windows 11, Microsoft Edge, and Exchange hacked at Pwn2Own

Usama Jawad — Fri, 15 May 2026 18:38:01 +0000

Microsoft products and AI apps fell to multiple 0-days at Pwn2Own 2026 as researchers claimed huge cash prizes. Read more...

Microsoft releases emergency out-of-band .NET update to patch severe bug

Usama Jawad — Wed, 22 Apr 2026 00:14:01 +0000

A serious flaw in recent .NET builds has forced an urgent patch, with Microsoft warning impacted apps could grant attackers SYSTEM privileges. Read more...

Google exposes Windows 11 security flaw after Microsoft fails to patch it properly

Usama Jawad — Tue, 16 Dec 2025 15:28:01 +0000

Google has recently detailed a flaw in Windows 11 that allows attackers to elevate privileges to administrator levels. Read more...

Microsoft will now pay you up to $40,000 for reporting vulnerabilities in .NET

Usama Jawad — Thu, 31 Jul 2025 19:12:01 +0000

Microsoft will now award anyone up to $40,000 if they privately disclose a high-severity security issue in .NET and ASP.NET Core, along with complete documentation. Read more...

Google Project Zero reveals another Windows elevation of privilege vulnerability [Update]

Usama Jawad — Thu, 19 Aug 2021 07:58:01 +0000

Google Project Zero has disclosed yet another Windows vulnerability that can lead to elevation of privilege. Microsoft had initially stated that it would not resolve it, but is now working on a fix. Read more...

Google exposes Windows privilege escalation bug following botched fix

Usama Jawad — Fri, 25 Jun 2021 17:58:01 +0000

Google's Project Zero team has disclosed yet another elevation of privilege exploit present in Windows given Microsoft's inability to properly fix it in the given 90 days time frame. Read more...

Google discloses a "high" severity security flaw in Windows 10 [Update]

Usama Jawad — Wed, 21 Feb 2018 08:28:01 +0000

Google has exposed a "high" severity issue in Windows 10 version 1709, which allows the elevation of privilege by arbitrarily changing a file's security descriptor, but it can't be done remotely. Read more...