221206 matches found
CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
...
CVE-2026-58529
Summary (CVE-2026-58529): Out-of-bounds read in Active Directory Federation Services (AD FS) can disclose information over a network to an authorized attacker. The entry is supported by multiple connected sources (NVD/NCSC/CIRCL/NVDC/MSRC) confirming the vulnerability and its description. The CVS...
CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability
...
CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability
...
CVE-2026-56181
CVE-2026-56181 is a Windows Network Address Translation (NAT) spoofing vulnerability caused by an origin-validation error. It enables an adjacent-network attacker to impersonate a user on the NATed network, with high impact (code/privilege implications per report). Microsoft has released updates;...
CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability
...
CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability
...
CVE-2026-58638
CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58637
CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2026-58632
CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2026-58628 Windows Wireless Network Manager Elevation of Privilege Vulnerability
...
CVE-2026-58628
CVE-2026-58628 affects Windows Wireless Networking and is described as a race condition in concurrent access to a shared resource, allowing an authenticated local attacker to elevate privileges. The underlying issue is improper synchronization that leads to elevation of privileges on Windows syst...
CVE-2026-58628 Windows Wireless Network Manager Elevation of Privilege Vulnerability
...
CVE-2026-58626 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2026-58626
CVE-2026-58626 is a Windows Remote Desktop Services use-after-free vulnerability that can allow an authenticated attacker to execute arbitrary code over the network. The CVE is rated CVSS v3.1 base score 8.8 (High) with Network attack, Low attack complexity, Privileges Required: Low, User Interac...