CVE-2026-40952: Incorrect Default Permissions

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...

EUVD-2026-44141

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network...

EUVD-2026-44117

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-43954

Missing authentication for critical function in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

EUVD-2026-44074

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

EUVD-2026-43858

Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-43856

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

EUVD-2026-44019

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

EUVD-2026-43847

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

EUVD-2026-43818

Improper access control in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-57089

Use after free in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to execute code over a network...

CVE-2026-56188

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Network driver allows an unauthorized attacker to execute code over a network...

CVE-2026-50690

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

CVE-2026-50444

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-50328

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

CVE-2026-50364

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

CVE-2026-50311

Improper access control in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-48564

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...

CVE-2026-58627 Windows DHCP Server Denial of Service Vulnerability

...

EUVD-2026-44308

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network...