CVE-2026-50355

CVE-2026-50355 is a vulnerability in Active Directory Federation Services (AD FS) described as a stack-based buffer overflow that enables a remote, unauthenticated attacker to cause a denial of service over the network. The CVSS v3.1 base score is 7.5 (Network, Low attack complexity, No privilege...

CVE-2026-50428

The CVE-2026-50428 entry concerns an Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) that enables a locally authorized attacker to disclose information (information disclosure). The issue affects the Windows Container Isolation FS Filter Driver path and is confirm...

CVE-2026-50358

CVE-2026-50358 is a Windows Media use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Affected component: Windows Media. Root cause: use-after-free in Windows Media code path. Impact: local privilege escalation with high severity as per Microsoft guid...

CVE-2026-50416

CVE-2026-50416 is a Win32K information disclosure vulnerability in Windows. The issue allows local disclosure of sensitive data to an attacker with local access (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, Base score 3.3). Microsoft has released updates to address this vulnerability; apply th...

CVE-2026-50366

CVE-2026-50366 describes a Denial of Service in Windows Active Directory Domain Services caused by a null pointer dereference. The vulnerability is exploitable over the network with no user interaction, requiring low privileges and network access from an authenticated attacker; the impact is deni...

CVE-2026-50404

CVE-2026-50404 affects Windows Media: a race condition in a shared resource allows local privilege escalation by an authorized user. The root cause is concurrent execution with improper synchronization. Impact is local elevation of privileges; exploitation status is not provided in the documents....

CVE-2026-50340

CVE-2026-50340 is a Windows Runtime use-after-free vulnerability that enables an authorized attacker to escalate privileges over a network. The issue stems from a memory management flaw (use-after-free) in a Windows Runtime component, leading to local privilege escalation when the affected code i...

CVE-2026-50317

CVE-2026-50317 is a Windows OS elevation-of-privilege vulnerability described as a race condition in a shared resource that can be exploited locally by an authenticated attacker. Public details in connected documents confirm the affected product family as Windows operating systems and the root ca...

CVE-2026-50361

CVE-2026-50361 describes a double free in Microsoft Brokering File System leading to local privilege elevation for an authenticated attacker. The vulnerability affects the Brokering File System component and is triggered via improper memory management that can allow an attacker with local access ...

CVE-2026-50375

CVE-2026-50375 is a Windows DirectX Graphics Kernel elevation-of-privilege vulnerability. The issue stems from a heap-based buffer overflow in DirectX, allowing an authorized attacker to locally elevate privileges. Affected component: Windows DirectX/DirectX Graphics Kernel (dxgkrnl). Current doc...

CVE-2026-50335

CVE-2026-50335 is a Windows Operating Systems elevation of privilege vulnerability enabled by improper access control. The entry is supported by multiple connected sources (NVD, CIRCL sighting, MSRC/KB pages) and is documented as a local, privilege-escalation issue with CVSSv3.1 base score 7.8 (H...

CVE-2026-50345

CVE-2026-50345 corresponds to a race condition in Windows Runtime (concurrent execution with improper synchronization) that allows an authorized attacker to perform local privilege escalation. The entry lists the vulnerability as a Windows Runtime elevation-of-privilege issue with CVSSv3.1 base m...

CVE-2026-50322

CVE-2026-50322 is a Windows Runtime elevation-of-privilege vulnerability caused by a race condition due to improper synchronization when accessing a shared resource. Multiple sources confirm the issue exists in Windows Runtime and enables a locally authenticated attacker to elevate privileges. Th...

CVE-2026-50348

CVE-2026-50348 describes a race condition in Windows Runtime where concurrent execution using a shared resource with improper synchronization can allow an unauthenticated attacker to elevate privileges over a network. The description and publicly visible details indicate the vulnerability affects...

CVE-2026-50452

CVE-2026-50452 (Windows Runtime) describes a race condition in Windows Runtime due to improper synchronization on a shared resource. This concurrency flaw can allow an unauthenticated, remote attacker to elevate privileges over the network. The CVE is associated with a high base score (7.0) and n...

CVE-2026-50390

CVE-2026-50390 is a Windows Kernel elevation-of-privilege in which an authorized attacker can gain local privileges through a type-confusion vulnerability (incompatible resource type). The CVE is documented with a CVSSv3.1 vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, BASE SCORE 7.0 (HIGH). Affe...

CVE-2026-50357

CVE-2026-50357 affects Windows Resilient File System (ReFS). The issue is a numeric truncation error in ReFS that, per the provided documents, can enable an authorized attacker to execute code locally. The MSRC/MSVCN details list this as an elevation of privileges / local arbitrary code execution...

CVE-2026-50377

CVE-2026-50377 is a Windows Kernel elevation-of-privilege vulnerability described as an out-of-bounds read that enables an authorized local attacker to gain higher privileges. The connected materials consistently identify the Windows Kernel as the affected component and state the root cause as a ...

CVE-2026-50312

CVE-2026-50312 is a Windows Ancillary Function Driver for WinSock use-after-free vulnerability that enables local privilege escalation when exploited. The initial description and connected sources confirm the affected component and root cause, and indicate the impact is elevation of privileges fo...

CVE-2026-50330

CVE-2026-50330 is a Windows Remote Desktop Client vulnerability described as a heap-based buffer overflow that allows an unauthenticated attacker to escalate privileges over the network. The CVE appears in multiple sources (NVD, EUVD, CIRCL) with consistent language about privilege elevation via ...

CVE-2026-50324

CVE-2026-50324 affects Windows Active Directory Federation Services (AD FS). The description identifies a loop condition described as an infinite loop that enables a network-based Denial of Service against AD FS. The CVE entry lists a Medium severity (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) with Ava...

CVE-2026-50430

CVE-2026-50430 is the Windows Push Notifications information-disclosure vulnerability. The available sources state that exposure of sensitive information to an unauthorized actor can occur, allowing a locally-present attacker to disclose information. Affected component: Windows Push Notifications...

CVE-2026-50310

CVE-2026-50310 describes an integer overflow/wraparound in Windows Devices Human Interface which allows an authorized local attacker to disclose information. Affected component is the Windows Devices Human Interface; root cause is an overflow condition that can leak data locally. Microsoft has re...

CVE-2026-50434

CVE-2026-50434 is a Windows Push Notifications information disclosure vulnerability. The entry describes exposure of sensitive data to an unauthorized actor, enabling disclosure locally. Key technical details from the provided documents: Affected component: Windows Push Notifications service in W...

CVE-2026-50339

CVE-2026-50339 is a Windows Push Notifications information-disclosure vulnerability. It allows a low-privilege, local attacker with no user interaction to disclose sensitive data locally. Affected software is Windows Push Notifications; CVSS v3.1 base score 5.5 (Medium). Microsoft has released up...

CVE-2026-50315

CVE-2026-50315 is a Windows Image Acquisition vulnerability described as a null pointer dereference that allows an authorized, local attacker to achieve privilege escalation. The entry notes a CVSSv3.1 base score of 7.8 (High), with local attack vector, low attack complexity, required privileges,...

CVE-2026-50425

CVE-2026-50425: A use-after-free in Windows Internal System User Profile leads to local privilege escalation for an authorized attacker. Affected component: Windows Internal System User Profile; root cause: use-after-free; impact: gain high privileges locally with no user interaction (CVSSv3.1: A...

CVE-2026-50321

CVE-2026-50321 is a Windows USB Driver elevation-of-privilege vulnerability (race condition on a shared resource). An authorized, local attacker could exploit this to gain higher privileges on the affected system, per the NVD entry and cross-referenced sources. Connected advisories corroborate th...

CVE-2026-50347

CVE-2026-50347 is a Windows Data.dll vulnerability characterized by a heap-based buffer overflow that allows an unauthorized, local attacker to execute code. The affected component is Windows Data.dll; the underlying issue is a heap overflow leading to remote-code-execution-style impact via local...

CVE-2026-50370

CVE-2026-50370 is a heap-based buffer overflow in the Windows DHCP Server service that could allow an unauthenticated attacker on an adjacent network to execute code. The vulnerability is listed among the July 2026 Patch Tuesday disclosures and is included in Microsoft’s security updates (KB50995...

CVE-2026-50343

CVE-2026-50343, a Microsoft Install Service Elevation of Privilege vulnerability, arises from improper privilege management. An authorized local attacker could elevate privileges on affected Windows systems. The vulnerability is listed among several critical Windows privilege-escalation issues di...

CVE-2026-50396

CVE-2026-50396 is a Windows Kernel-Mode Driver vulnerability described as a use-after-free in kernel-mode drivers that can allow an authenticated attacker to elevate privileges locally. The issue affects Windows kernel components classified under Windows Kernel-Mode Drivers and is mapped to CVSS ...

CVE-2026-50331

CVE-2026-50331 is a Windows Application Model Core API elevation-of-privilege vulnerability caused by a use-after-free issue. It affects the Windows Application Model Core API component and allows an authorized attacker with local access to elevate privileges. Microsoft has issued updates to addr...

CVE-2026-50407

CVE-2026-50407 : A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized local attacker to elevate privileges. The vulnerability is confirmed in multiple feeds (NVD/NCSC/MSRC) and is listed under ReFS with an impact of local privilege escalation. Microsoft has re...

CVE-2026-50341

CVE-2026-50341 is a Windows NTFS information-disclosure issue caused by a buffer over-read. The vulnerability allows an authorized local attacker to disclose information from memory. Public documentation in connected sources confirms the affected component as NTFS and describes a local-exploitati...

CVE-2026-50327

CVE-2026-50327 is a heap-based buffer overflow in Windows Media that could allow an authorized attacker to execute code locally. Affected components are Windows Media/Windows Media Foundation. The root cause is a heap-based buffer overflow. Mitigation: apply the Microsoft security updates; the CV...

CVE-2026-50380

CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...

CVE-2026-50440

CVE-2026-50440 overview (Windows Audio Service): A race condition caused by concurrent execution on a shared resource with improper synchronization in the Windows Audio Service can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege-escala...

CVE-2026-50326

CVE-2026-50326 affects the Windows Unified Consent System. Description: use-after-free leading to local privilege escalation for an authorized attacker. Connected sources confirm the vulnerability and indicate Microsoft patches are available (e.g., MSRC/KB articles). In any write-up, cite that th...

CVE-2026-50313

CVE-2026-50313 is a Windows NTFS heap-based buffer overflow vulnerability that could allow an attacker to achieve local code execution. The CVE entry describes a heap-based overflow in NTFS that enables exploitation by a privileged/unauthenticated attacker with local access, with the NVD entry al...

CVE-2026-50307

CVE-2026-50307 (Windows TCP/IP) is a local privilege-escalation vulnerability in the Windows TCP/IP stack caused by a use-after-free condition. The issue could allow an authenticated, local attacker to elevate privileges on a vulnerable system. The CVE is documented across multiple sources, inclu...

CVE-2026-50368

CVE-2026-50368 refers to a stack-based buffer overflow in Active Directory Federation Services (AD FS) that allows an unauthenticated attacker to cause a denial of service over the network. The vulnerability arises in the AD FS component and is described in multiple sources as enabling a DS impac...

CVE-2026-50419

CVE-2026-50419 is a Windows Kernel information-disclosure vulnerability that could allow an authorized local attacker to disclose sensitive data. The CVSS v3.1 base score is 3.3 (LOW) with LOCAL access and low complexity; no exploitation details are provided in the connected documents. Microsoft ...

CVE-2026-50400

CVE-2026-50400 is a Windows App Installer elevation-of-privilege vulnerability caused by a stack-based buffer overflow. An attacker with local, low-privilege access could exploit this to gain higher privileges on the system. Public sources confirm a local-execution path via Windows App Installer ...

CVE-2026-50309

CVE-2026-50309 is a Windows NTFS heap-based buffer overflow that could allow an authorized, local attacker to execute code. Public details consistently describe the vulnerability in Windows NTFS, with the impact stated as local code execution. Microsoft has released updates addressing this vulner...

CVE-2026-50337

CVE-2026-50337 is a Windows Notification vulnerability described as an issue with an incorrect type conversion or cast that allows an authorized attacker to achieve local privilege escalation. The CVE is listed with a CVSS v3.1 base score of 7.8 (HIGH), indicating a local attack vector with low c...

CVE-2026-50386

CVE-2026-50386 refers to a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code locally. The vulnerability affects Windows NTFS components as described in authoritative sources (NVD entry and MSRC update guidance). The exploitation detail in the provided...

CVE-2026-50412

CVE-2026-50412 is a Windows NTFS elevation-of-privilege vulnerability caused by a stack-based buffer overflow. The affected component is NTFS in Windows, allowing an authorized local attacker with low privileges and no user interaction to gain SYSTEM-level privileges (base CVSS v3.1: 7.8, Local, ...

CVE-2026-50393

CVE-2026-50393 is a Windows kernel-mode driver use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The entry is supported by multiple sources in connected documents, including NVD/MSRC summaries. Affected component: Windows Kernel-Mode Drivers (kernel s...

CVE-2026-50360

The CVE-2026-50360 entry describes an Elevation of Privilege in Windows SMB Server caused by an incorrect authentication algorithm, allowing an authorized attacker to elevate privileges over the network. Published CVSS v3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 8.8, HIGH). Windows has...