CVE-2026-58595

CVE-2026-58595 concerns the Microsoft Bing App for iOS, where an improper restriction of rendered UI layers or frames enables an unauthorized attacker to spoof over a network. The vulnerability affects the Bing iOS app’s UI rendering stack (specific component not detailed in the provided document...

CVE-2026-50522

CVE-2026-50522 is a deserialization flaw in Microsoft Office SharePoint that enables remote code execution over a network. Affected products include on‑premises SharePoint Server variants (Server 2016/2019, Subscription Edition, Enterprise Server). The root cause is deserialization of untrusted d...

CVE-2026-58279

CVE-2026-58279 affects Azure CycleCloud. The issue is missing authorization that could allow an authorized attacker to elevate privileges over a network, with integrity impact high and CVSS v3.1 base score 6.5. The attack vector is network; privileges required are low and user interaction is none...

CVE-2026-57979

CVE-2026-57979 describes an out-of-bounds read in Windows Remote Desktop Protocol (RDP) that could allow an unauthenticated or network-attached attacker to disclose information over the network. Publicly referenced sources (NVD, MSRC updates, ENISA EUVD, and security advisories) corroborate an in...

CVE-2026-57969

Technical details (affected versions, root cause, exploit vectors) are not publicly available in the provided documents. Monitor for updates from official sources and CVE records.

CVE-2026-56185

Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network...

CVE-2026-56185

CVE-2026-56185 describes an information-disclosure issue in Windows Admin Center caused by improper authentication. The documented impact is that an authorized attacker can disclose information over a network, with a CVSS 3.1 base score of 6.5 (Network attack vector, Low attack complexity, Low pr...

CVE-2026-50694

CVE-2026-50694 is a Windows SSTP use-after-free vulnerability that could allow an unauthenticated attacker to execute code remotely over the network. The issue affects Windows Secure Socket Tunneling Protocol (SSTP) and is rated high/critical in external assessments, with exploitation possible wi...

CVE-2026-56170

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-56164

CVE-2026-56164 is a Microsoft SharePoint Server elevation-of-privilege vulnerability described as missing authentication for a critical function, enabling a remote attacker to elevate privileges over a network. Public advisories indicate widespread Office-related vulnerabilities, with SharePoint ...

CVE-2026-56164

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-54118

CVE-2026-54118 affects Microsoft SQL Server. The vulnerability arises from deserialization of untrusted data, enabling a network-based remote code execution by an authorized attacker. The CVSS 3.1 base score is 8.8 (HIGH) with network attack vector, low attack complexity, requiring low privileges...

CVE-2026-54117

CVE-2026-54117 affects Microsoft SQL Server and is caused by deserialization of untrusted data, enabling an authorized attacker to execute code over a network. The CVSS v3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and privileges required as LOW; impact to confidential...

CVE-2026-54117

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-50338

Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network...

CVE-2026-50338

Technical details are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2026-55008

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-55005

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

CVE-2026-54995

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...

CVE-2026-54995

CVE-2026-54995 refers to a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST). The flaw could allow an unauthenticated attacker to execute arbitrary code over the network. Public references in the provided docs (NVD, MSRC update guidance, and patch reviews) c...