CVE-2026-58533: Use of Uninitialized Resource

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

PT-2026-58422

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description A missing authentication check for a critical function in the Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

PT-2026-58122

Name of the Vulnerable Software and Affected Versions Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Windows App Store, this flaw allows an unauthorized...

PT-2026-58377

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A race condition exists in Windows Media, where concurrent execution using a shared resource with improper synchronization allows an...

PT-2026-58616

Name of the Vulnerable Software and Affected Versions Windows Remote Access Service Infrastructure affected versions not specified Description An integer overflow or wraparound in the Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network...

PT-2026-58479

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A use after free issue in Windows Message Queuing allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memo...

CVE-2026-56194: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network...

CVE-2026-56186: Out-of-bounds Read

Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network...

CVE-2026-56190: Use of Uninitialized Resource

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network...

CVE-2026-56648: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...

CVE-2026-55145: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

CVE-2026-50447: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

CVE-2026-50376: Use of Uninitialized Resource

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

CVE-2026-50380: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-54126: Out-of-bounds Read

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...

CVE-2026-50684: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...

CVE-2026-50647: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-57979: Out-of-bounds Read

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...

CVE-2026-57969: Missing Authentication for Critical Function

Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

CVE-2026-49787: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...