CVE-2026-54128

CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...

CVE-2026-50686 Windows OLE Remote Code Execution Vulnerability

...

CVE-2026-50686

CVE-2026-50686 is a Windows OLE remote code execution vulnerability caused by a type confusion in resource access. It enables network-exposed code execution without authentication and is documented with CVSS v3.1 base score 8.1 (High). Public references identify the affected area as Windows OLE, ...

CVE-2026-50686 Windows OLE Remote Code Execution Vulnerability

...

CVE-2026-50685

CVE-2026-50685 is a Windows DHCP Server Remote Code Execution vulnerability caused by a double-free in the DHCP Server component. It is network-exploitable (no user interaction) and rated by Microsoft as an in-scope issue with high impact (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; CVSS v3.1 base 7.5)....

CVE-2026-50685 Windows DHCP Server Remote Code Execution Vulnerability

...

CVE-2026-50685 Windows DHCP Server Remote Code Execution Vulnerability

...

CVE-2026-50655

CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...

CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-50518 Windows DHCP Server Remote Code Execution Vulnerability

...

CVE-2026-50518 Windows DHCP Server Remote Code Execution Vulnerability

...

CVE-2026-50510 GitHub Copilot Remote Code Execution Vulnerability

...

CVE-2026-50510

CVE-2026-50510 concerns the GitHub Copilot vulnerability affecting the JetBrains Copilot plugin prior to version 1.13.0. The issue is described as an improper restriction of names for files and other resources, enabling an attacker with local access to execute code on the affected system. The ass...

CVE-2026-50518

CVE-2026-50518 is a heap-based buffer overflow in Windows DHCP Server that allows an unauthenticated attacker to execute code remotely over a network. Public sources (NVD, EUVD, CIRCL, MSRC update guidance) confirm the flaw and its impact as remote code execution; Talos notes exploitation in the ...

CVE-2026-50510 GitHub Copilot Remote Code Execution Vulnerability

...

CVE-2026-50501 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

CVE-2026-50501 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

CVE-2026-50501

CVE-2026-50501 is a Windows ReFS (Resilient File System) vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code. The CVE is associated with a high impact (CVSS v3.1 base score 7.8, Local attack, no privileges, user interaction required) and is tracke...

CVE-2026-50492

CVE-2026-50492 describes a heap-based buffer overflow in the Windows Resilient File System (ReFS) that allows an unauthorized attacker to achieve remote code execution with a physical attack. The connected sources corroborate ReFS as the affected component and frame the impact as remote code exec...