193 matches found
CVE-2026-42900: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Store allows an unauthorized attacker to elevate privileges over a network...
PT-2026-58379
Name of the Vulnerable Software and Affected Versions Windows App Installer affected versions not specified Description A stack-based buffer overflow occurs in Windows App Installer, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition...
PT-2026-58158
Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...
PT-2026-58136
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
PT-2026-58202
Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...
PT-2026-58135
Name of the Vulnerable Software and Affected Versions Windows App Installer affected versions not specified Description A use-after-free condition exists in Windows App Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
CVE-2026-50356: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
PT-2026-58140
Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description The use of an uninitialized resource allows an authorized attacker to locally disclose sensitive information, which can impact the system. Recommendations At the moment,...
CVE-2026-48572: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
PT-2026-58122
Name of the Vulnerable Software and Affected Versions Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Windows App Store, this flaw allows an unauthorized...
CVE-2026-48571: Use After Free
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks
Two researchers have found six security flaws in AirDrop and Quick Share , the wireless features that beam files between nearby devices with no cables or shared network. An attacker within wireless range, with just a laptop and no prior connection, can crash the sharing service on a Mac or iPhone...
Microsoft Remote Desktop Client buffer error vulnerability
Microsoft Remote Desktop Client is a remote desktop client developed by Microsoft Corporation. There are security vulnerabilities in Microsoft Remote Desktop Client. Attackers can exploit these vulnerabilities to execute code. The following products and versions are affected: Windows 10 Version...
Microsoft Windows App < 2.0.1070.0 RCE (April 2026)
The Windows App Client for Windows Desktop formerly known as Remote Desktop Client installed on the remote host is prior to 2.0.1070.0. It is, therefore, affected by a remote code execution vulnerability: - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov...
Microsoft Power Apps < 3.26032.10.0 Security Feature Bypass (April 2026)
The Windows 'Microsoft Power Apps' app installed on the remote host is prior to version 3.26032.10.0. It is, therefore, affected by a security feature bypass vulnerability: - Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to...
Windows App Client Remote Desktop Spoofing
The vulnerability of the Windows App Client’s remote desktop client is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
EUVD-2026-10580
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-10579
Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network...
