CVE-2026-50457

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50456

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-50455

Use of uninitialized resource in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

CVE-2026-50458

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-50449

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50448

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-50451

Missing authentication for critical function in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-50440

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50442

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-50441

Untrusted pointer dereference in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50437

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

CVE-2026-50433

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2026-50434

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-50436

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-50427

Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-50428

Out-of-bounds read in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to disclose information locally...

CVE-2026-50430

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-50421

Access of resource using incompatible type 'type confusion' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-50420

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally...

CVE-2026-50419

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...