CVE-2026-40952 Privilge misconfiguration in Secure Access installers

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...

CVE-2026-57089

Use after free in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to execute code over a network...

CVE-2026-56188

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Network driver allows an unauthorized attacker to execute code over a network...

CVE-2026-50690

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

CVE-2026-50444

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-50328

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

CVE-2026-50364

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

CVE-2026-50311

Improper access control in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-48564

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...

CVE-2026-58627 Windows DHCP Server Denial of Service Vulnerability

...

CVE-2026-57089

Summary : CVE-2026-57089 affects the Windows SMB Server Network Transport Driver (srvnet.sys). The issue is a use-after-free memory corruption bug that can be triggered by an unauthenticated attacker over the network to achieve remote code execution. The vulnerability is listed with high to criti...

CVE-2026-56648 Windows NFS Server Elevation of Privilege Vulnerability

...

CVE-2026-56188

CVE-2026-56188: A race-condition in the Windows Server Network driver (concurrent access to a shared resource) can allow an unauthenticated attacker to execute code over the network. The vulnerability affects the Windows Server Network driver and is described as a remote code execution flaw with ...

CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability

...

CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability

...

CVE-2026-56168

CVE-2026-56168 : Null pointer dereference in Windows SMB Server can allow an authorized attacker to cause a Network-based Denial of Service. It targets the Windows SMB Server component and has a CVSS v3.1 base vector of Network, Low Attack Complexity, Privileges Required: Low, No User Interaction...

CVE-2026-50690 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-50685 Windows DHCP Server Remote Code Execution Vulnerability

...

CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

...

CVE-2026-50444

CVE-2026-50444 is a Windows Server Update Services (WSUS) Elevation of Privilege vulnerability caused by Missing authentication for a critical function. An authorized attacker could elevate privileges over the network. Public details are supported by multiple sources (MSRC update guide, NCSC advi...