249893 matches found
CVE-2026-50501
CVE-2026-50501 is a Windows ReFS (Resilient File System) vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code. The CVE is associated with a high impact (CVSS v3.1 base score 7.8, Local attack, no privileges, user interaction required) and is tracke...
CVE-2026-50501 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
CVE-2026-50492
CVE-2026-50492 describes a heap-based buffer overflow in the Windows Resilient File System (ReFS) that allows an unauthorized attacker to achieve remote code execution with a physical attack. The connected sources corroborate ReFS as the affected component and frame the impact as remote code exec...
CVE-2026-50492 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
CVE-2026-50492 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
CVE-2026-50498 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
...
CVE-2026-50498
CVE-2026-50498 affects the Windows Universal Disk Format File System Driver (UDFS) and is an Elevation of Privilege vulnerability in the UDFS component. The root cause is described as a privilege/escalation condition within the Windows UDFS driver, leading to local privilege escalation with a hig...
CVE-2026-50498 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
...
CVE-2026-50494 Windows NTFS Remote Code Execution Vulnerability
...
CVE-2026-50494
CVE-2026-50494 is a Windows NTFS vulnerability caused by a heap-based buffer overflow in NTFS handling that can let an authorized, local attacker execute code on the host. The issue affects Windows NTFS components and is being addressed by Microsoft security updates (e.g., KB5099539, KB5099540) r...
CVE-2026-50487 Windows DNS Client Elevation of Privilege Vulnerability
...
CVE-2026-50487 Windows DNS Client Elevation of Privilege Vulnerability
...
CVE-2026-50495 DNS Client Tampering Vulnerability
...
CVE-2026-50482 Windows NTFS Remote Code Execution Vulnerability
...
CVE-2026-50495 DNS Client Tampering Vulnerability
...
CVE-2026-50495
CVE-2026-50495 is a Windows DNS vulnerability described as improper access control that could allow an authorized local attacker to tamper DNS-related data. Multiple connected sources (NVD entry and MSRC update guidance) confirm this as a locally exploitable issue with a baseline CVSS v3.1 score ...
CVE-2026-50482 Windows NTFS Remote Code Execution Vulnerability
...
CVE-2026-50458
CVE-2026-50458 is a use-after-free vulnerability in Microsoft Brokering File System that allows an authorized local attacker to elevate privileges. Exploitation details are not provided in the public text, but the NVD/CIRCL/ENISA references confirm local privilege escalation with a CVSS v3.1 base...