CVE-2026-49784

Summary: CVE-2026-49784 describes a race condition in the Microsoft Windows App Store caused by concurrent access to a shared resource with improper synchronization. The vulnerability allows an authorized local attacker to elevate privileges. The reported CVSS v3.1 vector is AV:L/AC:H/PR:L/UI:N/S...

CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-49177

CVE-2026-49177 is a Windows TCP/IP vulnerability described as an out-of-bounds read that allows an authenticated, local attacker to disclose information. The CVE is supported by multiple sources in the Connected documents (NVD/NCSC/EUVD), which identify the affected component as Windows TCP/IP an...

CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

...

CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

...

CVE-2026-49173 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-49173

CVE-2026-49173 describes a use-after-free in the Windows Kernel that enables a locally authenticated attacker to elevate privileges. The vulnerability is rooted in a memory-management flaw within the kernel; no specific affected Windows versions, patches, or remediation steps are provided in the ...

CVE-2026-49173 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-49174

CVE-2026-49174 describes a vulnerability in Microsoft Windows DNS where missing authentication for a critical function could allow a locally authorized attacker to tamper with DNS behavior. The NVD entry notes a CVSS v3.1 base score of 6.1 (Medium) with a LOCAL attack vector, LOW attack complexit...

CVE-2026-49175 Windows DNS Client Elevation of Privilege Vulnerability

...

CVE-2026-49172

The CVE-2026-49172 entry describes a heap-based buffer overflow in Windows FTP Service that allows an unauthenticated, network-based attacker to execute code remotely. Documents confirm the vulnerability exists in Windows FTP Service and enables remote code execution with network access and no re...

CVE-2026-49172 Windows FTP Service Remote Code Execution Vulnerability

...

CVE-2026-49175

CVE-2026-49175 is a Windows DNS Client vulnerability described as a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation. The issue affects the Windows DNS client and is characterized by a LOCAL attack vector with low attack complexity and the need f...

CVE-2026-49172 Windows FTP Service Remote Code Execution Vulnerability

...

CVE-2026-49175 Windows DNS Client Elevation of Privilege Vulnerability

...

CVE-2026-49171 Windows Speech Runtime Elevation of Privilege Vulnerability

...

CVE-2026-49176 Windows WalletService Elevation of Privilege Vulnerability

...

CVE-2026-49176

Summary: CVE-2026-49176 is a Windows WalletService elevation of privilege vulnerability described as improper privilege management that could allow an authorized local attacker to escalate privileges. The available sources (NVD/CVE records) confirm the issue but do not provide concrete details on...

CVE-2026-49171 Windows Speech Runtime Elevation of Privilege Vulnerability

...

CVE-2026-49171

The CVE-2026-49171 entry describes a Use-After-Free vulnerability in Windows Speech Runtime that enables a locally authenticated attacker to elevate privileges. Affected: Microsoft Windows Speech Runtime components; root cause: use-after-free leading to arbitrary code or privilege escalation (det...