CVE-2026-50339 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-50434 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-50339 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-50337 Windows Notification Elevation of Privilege Vulnerability

...

CVE-2026-50337 Windows Notification Elevation of Privilege Vulnerability

...

CVE-2026-50337

CVE-2026-50337 is a Windows Notification vulnerability described as an issue with an incorrect type conversion or cast that allows an authorized attacker to achieve local privilege escalation. The CVE is listed with a CVSS v3.1 base score of 7.8 (HIGH), indicating a local attack vector with low c...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

Windows Notification Elevation of Privilege Vulnerability

Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

kernel: iommu: disable SVA when CONFIG_X86 is set

A security vulnerability was found in the Linux kernel's IOMMU Shared Virtual Addressing SVA implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and...

CVE-2026-50334: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally...

PT-2026-58324

Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally...

CVE-2026-50337: Incorrect Type Conversion or Cast

Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally...

PT-2026-58327

Name of the Vulnerable Software and Affected Versions Windows affected versions prior to July 2026 patchday Description An incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally. This issue occurs due to a bad type cast, which is a...

CVE-2026-53365

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...

CVE-2026-53365

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the notification subscription process when VAPID delivery is enabled. An attacker can cause the server to send outbound requests to arbitrary HTTPS endpoints by supplying a crafted endpoint URL during...

Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url

A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validaterestrictedurl of the component Webhook/Notification. The manipulation leads to time-of-check time-of-use. It is possible to initiate the attack remotely. The attack is...