CVE-2026-50524: Improper Validation of Specified Type of Input

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-50525: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-57102: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-56196: Relative Path Traversal

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...

CVE-2026-55020: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-50682: Out-of-bounds Read

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...

CVE-2026-54121: Improper Authorization

Improper authorization in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges over a network...

CVE-2026-50497: Off-by-one Error

Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...

CVE-2026-50429: Out-of-bounds Read

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network...

CVE-2026-50444: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-50411: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-50369: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-50666: Use After Free

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-50470: Out-of-bounds Read

Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network...

CVE-2026-50447: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

CVE-2026-50415: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network...

CVE-2026-50432: Use After Free

Use after free in Windows Virtual Filtering Platform VFP allows an authorized attacker to deny service over a network...

CVE-2026-50647: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-47295: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-50496: Out-of-bounds Read

Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network...