A 2017 Microsoft Office flaw, CVE-2017-11882, is still being exploited by attackers, proving that outdated software remains a major security risk.
security flaw
Microsoft disabled Windows Hello facial recognition in dark environments on Windows 10/11 due to a security flaw that could allow local spoofing attacks.
A WinZip vulnerability (CVE-2025-33028) allows attackers to bypass Mark-of-the-Web (MotW) protection, enabling silent code execution via malicious archives.