223371 matches found
CVE-2026-34328
Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally...
CVE-2026-34348
Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network...
CVE-2026-34349
Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally...
CVE-2026-34346
Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...
CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
...
CVE-2026-58529
Summary (CVE-2026-58529): Out-of-bounds read in Active Directory Federation Services (AD FS) can disclose information over a network to an authorized attacker. The entry is supported by multiple connected sources (NVD/NCSC/CIRCL/NVDC/MSRC) confirming the vulnerability and its description. The CVS...
CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability
...
CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability
...
CVE-2026-56181
CVE-2026-56181 is a Windows Network Address Translation (NAT) spoofing vulnerability caused by an origin-validation error. It enables an adjacent-network attacker to impersonate a user on the NATed network, with high impact (code/privilege implications per report). Microsoft has released updates;...
CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability
...
CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability
...
CVE-2026-58638
CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58637
CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2026-58632
CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...