EUVD-2026-56712

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2026-56661

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-61349

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59131

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59119

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

EUVD-2026-56593

Concurrent execution using shared resource with improper synchronization 'race condition' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-56591

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56430

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-56424

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2026-56383

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...

EUVD-2026-56364

Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally...

EUVD-2026-56361

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56344

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-59137

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

EUVD-2026-56311

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

EUVD-2026-56305

Improper neutralization of special elements used in a command 'command injection' in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-47299

Improper neutralization of special elements used in a command 'command injection' in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-54113

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network...

CVE-2026-48434 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...