CVE-2026-50323: Use After Free

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-54125: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50385: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50457: Use After Free

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

PT-2026-58392

Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description A use-after-free condition in Windows Runtime allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

CVE-2026-50449: Use After Free

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50413: Use After Free

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50503: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

PT-2026-58437

Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description A race condition occurs in the Windows Runtime due to improper synchronization when using a shared resource. This allows an unauthorized attacker to elevate privileges over a network...

PT-2026-58329

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use-after-free flaw in the Windows Runtime allows an authorized network user to elevate their privileges to administrator level. Use-after-free is a memory corruption issue that occurs...

CVE-2026-50340: Use After Free

Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network...

CVE-2026-50486: Use After Free

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50348: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

PT-2026-58429

Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description A race condition occurs in the Windows Runtime due to improper synchronization when using a shared resource. This allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50460: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50410: Use After Free

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

MAL-2026-10507 Malicious code in nodemon-delog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1c5b4054d6daffaf190005db661027e29255ae20de1bb410f506de1f178532 nodemon-delog is published under a name that resembles the widely-used nodemon package and ships a verbatim copy of nodemon's source tree, README,...

MAL-2026-10508 Malicious code in nodemon-elint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869b2e1ce23c7668369cd6316bca7d3f8a564fa575ebbee8d1e3cf6a68d4ccaa [email protected] copies the source tree, README, author metadata, and homepage of the legitimate nodemon package but is published under a...

Malicious code in nodemon-elint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869b2e1ce23c7668369cd6316bca7d3f8a564fa575ebbee8d1e3cf6a68d4ccaa [email protected] copies the source tree, README, author metadata, and homepage of the legitimate nodemon package but is published under a...

CVE-2026-55773

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, under certain circumstances, improper input handling could allow Cedar-expression injection via unescaped toCedarExpr. The...