CVE-2026-48561

Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to execute code over a network...

CVE-2026-47282

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-47282

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-44806

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

CVE-2026-42975

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-42900

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Store allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-40378

Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

CVE-2026-34348

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network...

CVE-2026-56181

CVE-2026-56181 is a Windows Network Address Translation (NAT) spoofing vulnerability caused by an origin-validation error. It enables an adjacent-network attacker to impersonate a user on the NATed network, with high impact (code/privilege implications per report). Microsoft has released updates;...

CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability

...

CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability

...

CVE-2026-58628 Windows Wireless Network Manager Elevation of Privilege Vulnerability

...

CVE-2026-58628 Windows Wireless Network Manager Elevation of Privilege Vulnerability

...

CVE-2026-58628

CVE-2026-58628 affects Windows Wireless Networking and is described as a race condition in concurrent access to a shared resource, allowing an authenticated local attacker to elevate privileges. The underlying issue is improper synchronization that leads to elevation of privileges on Windows syst...

CVE-2026-57089 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

...

CVE-2026-56650 Windows Network File System Elevation of Privilege Vulnerability

...

CVE-2026-56650 Windows Network File System Elevation of Privilege Vulnerability

...

CVE-2026-56650

CVE-2026-56650 is a Windows Network File System (NFS) vulnerability. A heap-based buffer overflow in NFS allows an authenticated local attacker to escalate privileges. The CVE entry is supported by multiple sources (NVD/MSRC/CIRCL/NCSC) with consistent description and references. Microsoft has re...

CVE-2026-56649 Windows Network File System Remote Code Execution Vulnerability

...

CVE-2026-56649

CVE-2026-56649 is a race-condition in Windows Network File System that could let a remote attacker execute code over the network by abusing a shared resource. Public sources (NVD, EUVD, CIRCL) confirm the race condition as the root cause. Microsoft has released updates addressing this vulnerabili...