CVE-2026-50670 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50483 Windows Graphics Component Information Disclosure Vulnerability

...

CVE-2026-50483 Windows Graphics Component Information Disclosure Vulnerability

...

CVE-2026-50483

CVE-2026-50483 affects Microsoft Graphics Component. The vulnerability is an information disclosure that allows a local, authorized attacker to access sensitive data, impacting confidentiality. The CVE is documented across multiple feeds (NVD, NCSC, CIRCL, etc.) with a Microsoft-provided update g...

CVE-2026-50325

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50325 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-49805 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-49787

The CVE-2026-49787 entry describes a Denial of Service vulnerability in Windows HTTP.sys caused by allocation of resources without limits or throttling, leading to an unauthorized network-based disruption. Affected component is HTTP.sys on Windows; impact is availability (denial of service) with ...

CVE-2026-49787 HTTP.sys Denial of Service Vulnerability

...

CVE-2026-58609 Windows Graphics Component Remote Code Execution Vulnerability

...

CVE-2026-58609 Windows Graphics Component Remote Code Execution Vulnerability

...

CVE-2026-58609

The CVE-2026-58609 entry describes an Out-of-bounds read in the Microsoft Graphics Component that enables local execution of code by an unauthenticated attacker with user interaction. The vulnerability is linked to a local attack vector with high impact to confidentiality, integrity, and availabi...

CVE-2026-14504

An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check...

CVE-2026-14504

Nexus Repository 3 suffers an authorization bypass in its component upload API. A user with only read/browse privileges on Swift, Terraform, or Conda hosted repositories can upload arbitrary artifacts, bypassing the intended write-permission check. The CVSS/metrics indicate high impact with netwo...

CVE-2026-14504 Nexus Repository 3 - Authorization Bypass in Component Upload API

An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check...

Windows Search Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally...

Windows Graphics Component Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

CVE-2026-8314

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe Siman component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute...

CVE-2026-8312

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe Siman component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute...