223489 matches found
CVE-2026-50331
CVE-2026-50331 is a Windows Application Model Core API elevation-of-privilege vulnerability caused by a use-after-free issue. It affects the Windows Application Model Core API component and allows an authorized attacker with local access to elevate privileges. Microsoft has issued updates to addr...
CVE-2026-50331 Windows Application Model Core API Elevation of Privilege Vulnerability
...
CVE-2026-50407
CVE-2026-50407 : A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized local attacker to elevate privileges. The vulnerability is confirmed in multiple feeds (NVD/NCSC/MSRC) and is listed under ReFS with an impact of local privilege escalation. Microsoft has re...
CVE-2026-50341
CVE-2026-50341 is a Windows NTFS information-disclosure issue caused by a buffer over-read. The vulnerability allows an authorized local attacker to disclose information from memory. Public documentation in connected sources confirms the affected component as NTFS and describes a local-exploitati...
CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability
...
CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability
...
CVE-2026-50407 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
...
CVE-2026-50407 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
...
CVE-2026-50327 Windows Media Remote Code Execution Vulnerability
...
CVE-2026-50327 Windows Media Remote Code Execution Vulnerability
...
CVE-2026-50327
CVE-2026-50327 is a heap-based buffer overflow in Windows Media that could allow an authorized attacker to execute code locally. Affected components are Windows Media/Windows Media Foundation. The root cause is a heap-based buffer overflow. Mitigation: apply the Microsoft security updates; the CV...
CVE-2026-50380 Windows GDI+ Remote Code Execution Vulnerability
...
CVE-2026-50380
CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...
CVE-2026-50440 Windows Audio Service Elevation of Privilege Vulnerability
...
CVE-2026-50440
CVE-2026-50440 overview (Windows Audio Service): A race condition caused by concurrent execution on a shared resource with improper synchronization in the Windows Audio Service can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege-escala...
CVE-2026-50380 Windows GDI+ Remote Code Execution Vulnerability
...
CVE-2026-50440 Windows Audio Service Elevation of Privilege Vulnerability
...
CVE-2026-50326 Windows Unified Consent System Elevation of Privilege Vulnerability
...