CVE-2026-50296

Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-49801

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

CVE-2026-49800

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally...

CVE-2026-49799

Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...

CVE-2026-49803

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2026-49789

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-49784

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...

CVE-2026-49783

Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-49173

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-49175

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-49165

Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally...

CVE-2026-49166

Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-49169

Use after free in DNS Server allows an authorized attacker to execute code over a network...

CVE-2026-48581

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally...

CVE-2026-49162

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-44800

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-40422

Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-40400

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network...

CVE-2026-34346

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...

CVE-2026-34348

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network...