CVE-2026-50462

External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-50459

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally...

CVE-2026-50463

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network...

CVE-2026-50461

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-50465

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

CVE-2026-50454

Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

CVE-2026-50456

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-50457

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50448

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-50449

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50447

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

CVE-2026-50450

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50452

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50440

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50444

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-50445

Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network...

CVE-2026-50442

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-50441

Untrusted pointer dereference in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50435

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-50434

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...