CVE-2026-50476

Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-49790

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability

...

CVE-2026-58531

CVE-2026-58531 is a Windows SMB elevation-of-privilege vulnerability caused by a race condition in a shared resource. It affects Windows SMB components and enables an authorized attacker to elevate privileges over the network. CVSS v3.1 base score 7.5 (NETWORK, HIGH impact), per Microsoft’s advis...

CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

...

CVE-2026-57089 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

...

CVE-2026-56183 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-56182

CVE-2026-56182 is a Windows NTFS elevation-of-privilege vulnerability caused by an integer overflow/wraparound in NTFS operations that can be exploited by an authorized local attacker. Public sources in the connected data corroborate the root cause and the affected component is NTFS on Windows. T...

CVE-2026-50686

CVE-2026-50686 is a Windows OLE remote code execution vulnerability caused by a type confusion in resource access. It enables network-exposed code execution without authentication and is documented with CVSS v3.1 base score 8.1 (High). Public references identify the affected area as Windows OLE, ...

CVE-2026-50670 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50492 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

CVE-2026-50484 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-50479

CVE-2026-50479 affects the Windows USB Hub Driver via an untrusted pointer dereference, enabling local privilege escalation for an authenticated user. Public sources confirm this vulnerability and Microsoft has released a security update to address it (MSRC vulnerability page). The entry is corro...

CVE-2026-50417

CVE-2026-50417 is a Windows NTFS heap-based buffer overflow that could allow an authenticated, local attacker to execute arbitrary code. The vulnerability affects Windows NTFS components and is described as a local, privilege-leveraging scenario with HIGH impact (CVE-3.1, base score 7.8). Connect...

CVE-2026-50457 Windows Runtime Elevation of Privilege Vulnerability

...

CVE-2026-50465

CVE-2026-50465 is a Windows DNS Client tampering vulnerability caused by improper access control that can be exploited locally by an authorized attacker. Connected sources confirm Windows DNS is affected (CVE-2026-50465 listed under Windows DNS with data manipulation; MSRC update guidance). The C...

CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-50437 Windows DWM Core Library Information Disclosure Vulnerability

...

CVE-2026-50437 Windows DWM Core Library Information Disclosure Vulnerability

...

CVE-2026-50428 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability

...