CVE-2026-26149

Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network...

CVE-2026-26172

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-26170

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

CVE-2026-26163

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-26165

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-20806

Access of resource using incompatible type 'type confusion' in Windows COM allows an authorized attacker to disclose information locally...

EUVD-2026-22645

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network...

EUVD-2026-22619

Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-22603

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally...

EUVD-2026-22601

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally...

EUVD-2026-22637

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-22612

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-22621

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-22560

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...

EUVD-2026-22559

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

EUVD-2026-22557

Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

EUVD-2026-22538

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

EUVD-2026-22546

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-22547

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-22575

Stack-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...