135075 matches found
CVE-2026-50450 Windows Network Connections Service Elevation of Privilege Vulnerability
...
CVE-2026-50476 Windows Network Connections Service Elevation of Privilege Vulnerability
...
CVE-2026-50476
Microsoft Windows CVE-2026-50476 is a local privilege-escalation vulnerability in the Windows Network Connections Service caused by a use-after-free. Affected component is the Windows Network Connections Service; root cause is a use-after-free condition that enables an authorized attacker to elev...
CVE-2026-50476 Windows Network Connections Service Elevation of Privilege Vulnerability
...
CVE-2026-50324
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-50370
CVE-2026-50370 is a heap-based buffer overflow in the Windows DHCP Server service that could allow an unauthenticated attacker on an adjacent network to execute code. The vulnerability is listed among the July 2026 Patch Tuesday disclosures and is included in Microsoft’s security updates (KB50995...
CVE-2026-50368
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...
CVE-2026-50306
CVE-2026-50306 is a Windows TCP/IP use-after-free vulnerability that allows an authorized, local attacker to elevate privileges. Affected component is the Windows TCP/IP stack; impact is local privilege escalation with high severity (CVSS 3.1: 7.8). Microsoft has released updates (KB5095051, KB50...
CVE-2026-50304
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...
CVE-2026-49799
Technical details are not publicly available in the provided documents. No confirmed affected products, fixes, or exploit specifics are described here; monitor official sources for updates.
CVE-2026-49787
The CVE-2026-49787 entry describes a Denial of Service vulnerability in Windows HTTP.sys caused by allocation of resources without limits or throttling, leading to an unauthorized network-based disruption. Affected component is HTTP.sys on Windows; impact is availability (denial of service) with ...
CVE-2026-49181
CVE-2026-49181 is a Windows DHCP Client vulnerability described as an integer underflow (wrap or wraparound) that allows an unauthenticated attacker to elevate privileges over a network. The CVE is corroborated by multiple sources in Connected documents, including NVD and MSRC updates, and ENISA/...
CVE-2026-45646
The provided records describe CVE-2026-45646 as a Denial of Service vulnerability in ASP.NET Core caused by allocation of resources without limits or throttling, enabling an unauthenticated attacker to disrupt services over the network. Concrete details in the connected documents include the affe...
CVE-2026-47632
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-47632
Azure Monitor Agent Metrics Extension is affected by CVE-2026-47632 due to improper certificate validation, enabling elevation of privileges for an unauthenticated attacker on an adjacent network. Exploitation details are not provided in the connected documents. CVSSv3.1 base score 8.8 (High): AV...
CVE-2026-40378
CVE-2026-40378 affects Windows Local Security Authority Subsystem Service (LSASS). A memory allocation with an excessive size value can allow an unauthenticated attacker to cause a network-based denial of service. The CVSSv3.1 base score is 7.5 (HIGH). No exploitation details are provided in the ...
CVE-2026-44806
CVE-2026-44806 : Windows Cryptographic Services vulnerability causing denial of service over the network due to missing release of memory after its effective lifetime. Affected component: Windows Cryptographic Services. Root cause described as missing memory release, leading to potential DoS. Rem...
CVE-2026-34348
CVE-2026-34348 affects the Windows Event Logging Service. The issue is a protection mechanism failure that can allow an authorized attacker to disclose information over a network. According to the available records, the exploit surface is network-based with low privileges required and no user int...
CVE-2026-40400
CVE-2026-40400 is a Windows PowerShell relative path traversal vulnerability that could enable an authorized attacker to execute code over a network. The CVE entry identifies a remote code execution risk with NETWORK attack vector, LOW attack complexity, and LOW privileges required, but with UI i...