CVE-2026-50440

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50441

Untrusted pointer dereference in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50442

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-50444

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-50445

Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network...

CVE-2026-50435

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-50432

Use after free in Windows Virtual Filtering Platform VFP allows an authorized attacker to deny service over a network...

CVE-2026-50434

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-50433

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2026-50436

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-50437

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

CVE-2026-50430

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-50431

Windows Quality of Service QoS Packet Scheduler Information Disclosure Vulnerability...

CVE-2026-50428

Out-of-bounds read in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to disclose information locally...

CVE-2026-50429

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network...

CVE-2026-50424

Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...

CVE-2026-50425

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

CVE-2026-50420

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally...

CVE-2026-50419

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-50423

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally...