CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

...

CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

...

CVE-2026-50444

CVE-2026-50444 is a Windows Server Update Services (WSUS) Elevation of Privilege vulnerability caused by Missing authentication for a critical function. An authorized attacker could elevate privileges over the network. Public details are supported by multiple sources (MSRC update guide, NCSC advi...

CVE-2026-50368 Windows Active Directory Federation Services Denial of Service Vulnerability

...

CVE-2026-50360 Windows SMB Server Elevation of Privilege Vulnerability

...

CVE-2026-50328 Windows Server Update Service (WSUS) Tampering Vulnerability

...

CVE-2026-50328 Windows Server Update Service (WSUS) Tampering Vulnerability

...

CVE-2026-50328

CVE-2026-50328 pertains to Windows Server Update Services (WSUS). An uncaught exception in WSUS could allow an unauthenticated attacker to tamper over the network, as reflected by a CVSS v3.1 base score of 7.5 (Network, high impact on availability, no confidentiality/integrity impact). Multiple c...

CVE-2026-50364

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

CVE-2026-50364

Technical details (affected product/version, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-50311 Windows Server Elevation of Privilege Vulnerability

...

CVE-2026-50311

Improper access control in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-50311 Windows Server Elevation of Privilege Vulnerability

...

CVE-2026-50311

CVE-2026-50311 concerns Windows Server where improper access control allows an authorized user to locally elevate privileges. Root cause: insufficient authorization checks in the affected Windows Server components, enabling privilege escalation with local access and no user interaction required. ...

CVE-2026-48564

CVE-2026-48564 refers to a heap-based buffer overflow in Windows DHCP Server that enables a network-based remote code execution by an authorized attacker. According to the available records, the vulnerability is high severity (CVSS v3.1: 8.8), with network as the attack vector, low attack complex...

CVE-2026-54997

Public technical details are not provided in the supplied documents for CVE-2026-54997. No specifics on affected products, versions, root cause, or remediation are available here. Monitor for updates from official sources.

CVE-2026-54997 Windows SMB Information Disclosure Vulnerability

...

2026-07 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB5102201)

2026-07 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 KB5102201...

2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5099535)

2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems KB5099535...

2026-07 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5102205)

2026-07 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 KB5102205...