CVE-2026-55144 Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability

...

CVE-2026-55144

The CVE-2026-55144 vulnerability concerns Windows Cryptography API: Next Generation (CNG). The issue is a missing cryptographic step in the Windows CryptoAPI that could allow an authorized, local attacker to tamper data, with impact to confidentiality and integrity (CVSSv3.1: Local attack, Low sk...

CVE-2026-55144 Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability

...

CVE-2026-54122

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

CVE-2026-54122 Windows GDI+ Remote Code Execution Vulnerability

...

CVE-2026-54122 Windows GDI+ Remote Code Execution Vulnerability

...

CVE-2026-54995 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

...

CVE-2026-55003 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

CVE-2026-54995 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

...

CVE-2026-55003 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

CVE-2026-54997

Public technical details are not provided in the supplied documents for CVE-2026-54997. No specifics on affected products, versions, root cause, or remediation are available here. Monitor for updates from official sources.

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

CVE-2026-54997 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-54999 Windows TCP/IP Remote Code Execution Vulnerability

...

CVE-2026-54999

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-54997

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

CVE-2026-54997 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-54999 Windows TCP/IP Remote Code Execution Vulnerability

...

CVE-2026-54119 Windows Active Directory Denial of Service Vulnerability

...

CVE-2026-54119

CVE-2026-54119 describes a loop with an unreachable exit condition in Windows Active Directory that can be exploited to cause a network-based denial of service by an unauthorized attacker. The affected component is Windows Active Directory; the vulnerability stems from an infinite loop, leading t...