CVE-2026-50414 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50413 - Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-50412 - Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca

CVE-2026-50411 - Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized a

CVE-2026-50410 - Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-50409 - Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an autho

CVE-2026-50408 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-50407 - Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to

CVE-2026-50406 - Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-50405 - Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized

CVE-2026-50404 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50403 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50402 - Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate

CVE-2026-50401 - Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclo

CVE-2026-50400 - Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privil

CVE-2026-50399 - Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50398 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50397 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50396 - Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo

CVE-2026-50394 - Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized att

CVE-2026-50393 - Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo

CVE-2026-50392 - Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges loc

CVE-2026-50391 - Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privi

CVE-2026-50390 - Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized

CVE-2026-50389 - Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author

CVE-2026-50388 - Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-50387 - Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges local

CVE-2026-50386 - Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-50385 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50383 - Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose infor

CVE-2026-50382 - Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code local

CVE-2026-50380 - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a ne

CVE-2026-50379 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50378 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50377 - Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50376 - Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information

CVE-2026-50375 - Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges lo

CVE-2026-50374 - Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr

CVE-2026-50373 - Improper access control in Microsoft Windows Search Component allows an authorized attacker to eleva

CVE-2026-50372 - Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate priv

CVE-2026-50371 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50370 - Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov

CVE-2026-50369 - Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privilege

CVE-2026-50368 - Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker

CVE-2026-50367 - Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an auth

CVE-2026-50366 - Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s

CVE-2026-50365 - Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges ove

CVE-2026-50363 - Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate pr

CVE-2026-50362 - Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker t

CVE-2026-50361 - Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges l

CVE-2026-50360 - Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized atta

CVE-2026-50359 - Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges lo

CVE-2026-50358 - Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-50357 - Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to ex

CVE-2026-50355 - Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker

CVE-2026-50353 - Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

CVE-2026-50352 - Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows

CVE-2026-50348 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50347 - Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code local

CVE-2026-50346 - Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-50345 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50344 - Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-50343 - Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate

CVE-2026-50341 - Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-50340 - Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network

CVE-2026-50339 - Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an a

CVE-2026-50337 - Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate p

CVE-2026-50336 - Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges loca

CVE-2026-50335 - Improper access control in Windows Operating Systems allows an authorized attacker to elevate privil

CVE-2026-50334 - Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authori

CVE-2026-50332 - Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc

CVE-2026-50331 - Use after free in Windows Application Model allows an authorized attacker to elevate privileges loca

CVE-2026-50330 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privi

CVE-2026-50329 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50328 - Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampe

CVE-2026-50327 - Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

CVE-2026-50326 - Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges

CVE-2026-50324 - Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD F

CVE-2026-50322 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50321 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50317 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50315 - Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privi

CVE-2026-50314 - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-50313 - Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-50312 - Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele

CVE-2026-50310 - Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to d

CVE-2026-50309 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-50307 - Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-50306 - Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-50305 - Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege

CVE-2026-50304 - Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker

CVE-2026-50302 - Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to

CVE-2026-50301 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-4018 - TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an atta

CVE-2026-4017 - Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with lo

CVE-2026-49177 - Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.

CVE-2026-48580 - Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose

CVE-2026-48368 - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code exe

CVE-2026-48365 - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code exe

CVE-2026-48309 - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code exe

CVE-2026-47969 - Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensiti

CVE-2026-47968 - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code exe

CVE-2026-47967 - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code exe

CVE-2026-47642 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-47295 - Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a

CVE-2026-47290 - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-45756 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Fr

CVE-2026-45077 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Pr

CVE-2026-45074 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Fr

CVE-2026-45067 - ### Description `Symfony\Component\Mime\Address` is the value-object every Symfony Mailer address (

CVE-2026-45066 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Fr

CVE-2026-45065 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Pr

CVE-2026-15757 - A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local

CVE-2026-15747 - Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CS

CVE-2026-15715 - A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by

CVE-2026-0515 - Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local a

CVE-2026-59891 - sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, ge

CVE-2026-59888 - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson

CVE-2026-59886 - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its manti

CVE-2026-59885 - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process

CVE-2026-59884 - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and

CVE-2026-59200 - Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/Pdf

CVE-2026-59197 - Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a n

CVE-2026-58647 - Improper neutralization of input during web page generation ('cross-site scripting') in Power BI all

CVE-2026-58644 - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to

CVE-2026-58640 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-58636 - Improper link resolution before file access ('link following') in Window PC Manager allows an author

CVE-2026-58635 - Improper neutralization of special elements used in a command ('command injection') in Windows Narra

CVE-2026-58631 - Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally

CVE-2026-58618 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-58614 - Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature loca

CVE-2026-58610 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-58609 - Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code l

CVE-2026-58608 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-58602 - Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges loc

CVE-2026-58601 - Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker

CVE-2026-58595 - Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unautho

CVE-2026-58526 - Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-58279 - Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a

CVE-2026-57979 - Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net

CVE-2026-57976 - Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s

CVE-2026-57969 - Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to el

CVE-2026-57107 - Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges

CVE-2026-57097 - Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature

CVE-2026-56193 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-56185 - Improper authentication in Windows Admin Center allows an authorized attacker to disclose informatio

CVE-2026-56170 - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker

CVE-2026-56169 - Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges

CVE-2026-56164 - Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized a

CVE-2026-56155 - Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an

CVE-2026-55948 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55899 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-55144 - Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering l

CVE-2026-55014 - Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate priv

CVE-2026-55012 - Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code

CVE-2026-55011 - Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to exec

CVE-2026-55009 - Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elev

CVE-2026-55008 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex

CVE-2026-55006 - Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacke

CVE-2026-55005 - Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute cod

CVE-2026-55004 - Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally

CVE-2026-55003 - Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information

CVE-2026-55002 - External control of file name or path in SQL Server allows an authorized attacker to elevate privile

CVE-2026-55001 - Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate

CVE-2026-55000 - Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges wit

CVE-2026-54999 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54997 - Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information l

CVE-2026-54996 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54995 - Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to ex

CVE-2026-54993 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-54992 - Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker

CVE-2026-54991 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54990 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code

CVE-2026-54989 - Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attack

CVE-2026-54988 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-54987 - Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil

CVE-2026-54986 - Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc

CVE-2026-54983 - Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized a

CVE-2026-54982 - Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an una

CVE-2026-54433 - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS

CVE-2026-54432 - Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS). The

CVE-2026-54132 - Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges w

CVE-2026-54129 - Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-54127 - Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

CVE-2026-54122 - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

CVE-2026-54119 - Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unautho

CVE-2026-54118 - Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a

CVE-2026-54117 - Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a

CVE-2026-54114 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-54112 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54111 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54109 - Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker

CVE-2026-54108 - External control of file name or path in Microsoft Office SharePoint allows an authorized attacker t

CVE-2026-54107 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54058 - Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA i

CVE-2026-50697 - Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver

CVE-2026-50696 - Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized at

CVE-2026-50695 - Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker

CVE-2026-50694 - Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to

CVE-2026-50678 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose inf

CVE-2026-50675 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-50663 - Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacke

CVE-2026-50653 - Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthori

CVE-2026-50652 - Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny

CVE-2026-50522 - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to

CVE-2026-50520 - Improper neutralization of special elements used in a command ('command injection') in Visual Studio

CVE-2026-50506 - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker

CVE-2026-50384 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50381 - Access of resource using incompatible type ('type confusion') in Composite Image File System Driver

CVE-2026-50364 - Improper link resolution before file access ('link following') in Windows Server Backup allows an au

CVE-2026-50356 - Concurrent execution using shared resource with improper synchronization ('race condition') in Micro

CVE-2026-50354 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50351 - Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to

CVE-2026-50350 - Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driv

CVE-2026-50342 - Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate priv

CVE-2026-50338 - Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges ove

CVE-2026-50333 - Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker

CVE-2026-50325 - Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall

CVE-2026-50323 - Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-50318 - Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to

CVE-2026-50316 - Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to

CVE-2026-50311 - Improper access control in Windows Server allows an authorized attacker to elevate privileges locall

CVE-2026-50308 - Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute co

CVE-2026-50303 - Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authoriz

CVE-2026-50300 - Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose i

CVE-2026-50299 - Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to e

CVE-2026-50298 - Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate p

CVE-2026-50297 - Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall

CVE-2026-50296 - Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50295 - Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a sec

CVE-2026-50294 - Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows

CVE-2026-50293 - Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges loca

CVE-2026-49808 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-49807 - Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized

CVE-2026-49806 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-49805 - Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall

CVE-2026-49804 - Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate pr

CVE-2026-49803 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-49802 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-49801 - Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information l

CVE-2026-49800 - Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authori

CVE-2026-49799 - Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allo

CVE-2026-49798 - Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

CVE-2026-49797 - Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-49796 - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

CVE-2026-49795 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-49794 - Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker

CVE-2026-49793 - Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to

CVE-2026-49792 - Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to ex

CVE-2026-49791 - Improper link resolution before file access ('link following') in Windows Routing and Remote Access