CVE-2026-47767

SymfonyRuntime CVE-2024-50340-related issue persists in CVE-2026-47767 coverage: when running under web SAPI with register_argc_argv=On, parse_str() can disagree with the web SAPI’s argv handling, allowing a crafted query string to leave $_GET empty while $_SERVER['argv'] contains attacker-contro...

CVE-2026-58527

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-54125

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50503

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50486

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50457

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50449

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50452

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50413

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50410

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50403

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50385

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50348

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50345

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50340

Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network...

CVE-2026-50322

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50323

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-58527

CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...

CVE-2026-54125

CVE-2026-54125 affects Windows Runtime and describes a race-condition vulnerability in concurrent execution on a shared resource that enables local privilege elevation for an authenticated attacker. The CVE is rated with CVSSv3.1 base metrics: AV Local, AC Low, PR Low, UI None, S unchanged, C/H/I...

CVE-2026-50503

CVE-2026-50503 is a Windows Runtime elevation-of-privilege vulnerability caused by a race condition from improper synchronization on a shared resource. The issue allows an authorized, low-privilege attacker to potentially gain higher privileges locally. Exploitation status is not detailed in the ...