CVE-2026-50348

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50330

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57976

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-56169

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-54995

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...

CVE-2026-50695

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-49799

Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...

CVE-2026-49787

Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...

CVE-2026-45646

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

EUVD-2026-44271

Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network...

CVE-2026-45646

The provided records describe CVE-2026-45646 as a Denial of Service vulnerability in ASP.NET Core caused by allocation of resources without limits or throttling, enabling an unauthenticated attacker to disrupt services over the network. Concrete details in the connected documents include the affe...

CVE-2026-50653

Loop with unreachable exit condition 'infinite loop' in Azure Active Directory allows an unauthorized attacker to deny service over a network...

CVE-2026-56170

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-54995

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...

CVE-2026-50506

CVE-2026-50506 concerns a Denial of Service vulnerability in ASP.NET Core caused by allocation of resources without limits or throttling, enabling an unauthenticated attacker to exhaust resources over the network. The NVD entry and CVE records describe this as affecting ASP.NET Core (and related ...

CVE-2026-49172

The CVE-2026-49172 entry describes a heap-based buffer overflow in Windows FTP Service that allows an unauthenticated, network-based attacker to execute code remotely. Documents confirm the vulnerability exists in Windows FTP Service and enables remote code execution with network access and no re...

Windows Active Directory Federation Services Denial of Service Vulnerability

Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Windows Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

Windows Cryptographic Services Security Feature Bypass Vulnerability

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...