CVE-2026-50398

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Media allows an authorized attacker to elevate privileges over a network...

CVE-2026-50404

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2026-50402

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50391

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...

CVE-2026-50394

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally...

CVE-2026-50393

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-50385

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50390

Access of resource using incompatible type 'type confusion' in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-50378

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Key Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-50383

Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally...

CVE-2026-50377

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-50372

Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

CVE-2026-50375

Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally...

CVE-2026-50371

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2026-50366

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-50359

Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally...

CVE-2026-50363

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-50361

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-50345

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50344

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally...