CVE-2026-56169: Improper Authentication

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-55040: Weak Authentication

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-57087: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-56170

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-58226

Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...

CVE-2026-49181: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...

PT-2026-58638

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description An authorized attacker can disclose information over a network due to the use of an uninitialized resource. This issue allows attackers to obtain sensitive information and affect the...

CVE-2026-50414: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Media allows an authorized attacker to elevate privileges over a network...

CVE-2026-50376: Use of Uninitialized Resource

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

CVE-2026-50340: Use After Free

Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network...

PT-2026-58607

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server affected versions not specified Description An uninitialized resource flaw in the Windows Remote Desktop Protocol RDP allows an unauthorized and unauthenticated attacker to execute arbitrary code over a...

PT-2026-58569

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

CVE-2026-50355: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50366: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-58206

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-55145: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

CVE-2026-50379: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Media allows an authorized attacker to elevate privileges over a network...

PT-2026-58362

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This flaw allows an unauthorized remote attacker to execute arbitrary...

CVE-2026-50497: Off-by-one Error

Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...

CVE-2026-50460: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...