CVE-2026-50688

CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability described as a use-after-free in the Win32k subsystem that allows a locally authenticated attacker to gain higher privileges. The connected documents confirm the CVE title and its Windows kernel context, with advisories and C...

CVE-2026-56175

CVE-2026-56175 describes a heap-based buffer overflow in Windows NTFS that allows an authorized, local attacker to elevate privileges. Connected sources (Microsoft MSRC update, NVD, NTFS/CIRCL sightings) confirm the vulnerability is in Windows NTFS, with local-privilege-escalation potential and a...

CVE-2026-58627

CVE-2026-58627 is a Windows DHCP Server Denial of Service vulnerability caused by uncontrolled resource consumption that allows a remote attacker to deny service over a network. Affected: Windows DHCP Server. Impact: availability loss (high). Mitigation: Microsoft has released updates and guidanc...

CVE-2026-26162

CVE-2026-26162 is a Windows OLE vulnerability described as a type-confusion in resource access that enables a locally authenticated attacker to elevate privileges. The Red Hat and NVD/NCSC entries confirm the same issue, with Microsoft’s MSRC entry associating it to Windows OLE and listing Window...

CVE-2026-50294

CVE-2026-50294 : Windows Kernel exposes sensitive system information to an unauthorized control sphere, enabling a local attacker to disclose information. Documents confirm a local attack vector with high confidentiality impact; no exploitation details or remediation are provided in the connected...

CVE-2026-50304

CVE-2026-50304 is a confirmed vulnerability affecting Microsoft Windows Active Directory Federation Services (AD FS). The issue is a stack-based buffer overflow in AD FS that could allow an unauthenticated network attacker to cause a denial of service. Connected sources corroborate the nature of ...

CVE-2026-50328

CVE-2026-50328 pertains to Windows Server Update Services (WSUS). An uncaught exception in WSUS could allow an unauthenticated attacker to tamper over the network, as reflected by a CVSS v3.1 base score of 7.5 (Network, high impact on availability, no confidentiality/integrity impact). Multiple c...

CVE-2026-50332

CVE-2026-50332 is a Windows Kernel elevation-of-privilege vulnerability described as a heap-based buffer overflow that can be exploited locally by an authorized user. Public sources in the connected documents confirm the issue affects Windows Kernel and note the CVE’s inclusion among July 2026 pa...

CVE-2026-50351

The CVE-2026-50351 issue concerns Windows Audio Compression Manager (ACM). It describes improper access control that could let an authenticated, local attacker elevate privileges on affected Windows systems. Documented impact is local privilege escalation with high severity (CVSS v3.1 base score ...

CVE-2026-50359

CVE-2026-50359 is a Microsoft XML Core Services elevation-of-privilege vulnerability described as a use-after-free issue. The NVD/NCSC/CIRCL entries confirm local privilege escalation for an authorized user. No exploit vectors are provided in the documents. Microsoft has released updates addressi...

CVE-2026-50386

CVE-2026-50386 refers to a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code locally. The vulnerability affects Windows NTFS components as described in authoritative sources (NVD entry and MSRC update guidance). The exploitation detail in the provided...

CVE-2026-50437

CVE-2026-50437 describes an out-of-bounds read in Windows DWM Core Library that could allow an authenticated local attacker to disclose information. Public docs identify the affected component (Windows DWM Core Library) and the impact (local information disclosure) with a CVSSv3.1 base score of 5...

CVE-2026-50445

CVE-2026-50445 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by a buffer over-read. An unauthenticated, remote attacker could disclose memory information over the network. Microsoft and partners have released updates (MSRC guidance) to address this vulnera...

CVE-2026-50475

CVE-2026-50475 is a Windows Kernel information‑disclosure vulnerability caused by a buffer over‑read in the kernel. An authorized local attacker can disclose information from memory. Documented impact is local information disclosure; no remote code execution is indicated in the provided sources. ...

CVE-2026-50500

CVE-2026-50500 is a Windows Netlogon use-after-free vulnerability allowing an authenticated attacker to elevate privileges over the network. The affected component is Windows Netlogon; impact is elevation of privileges (CVE-2026-50500, CVSS 7.5). Connected sources reference Microsoft advisories a...

CVE-2026-56186

CVE-2026-56186 is a Windows Schannel vulnerability described as an out-of-bounds read that enables an authorized attacker to disclose information over a network. The CVE affects the Windows Schannel security component and is rated with CVSS v3.1 base score 8.1 (High) and NETWORK attack vector wit...

CVE-2026-57087

CVE-2026-57087 is a Windows Media Foundation remote code execution vulnerability caused by a heap-based buffer overflow in Windows Media Foundation. An unauthenticated attacker could trigger code execution over a network. Public sources confirm the flaw affects Windows Media/Media Foundation comp...

CVE-2026-58638

CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...

CVE-2026-49176

Summary: CVE-2026-49176 is a Windows WalletService elevation of privilege vulnerability described as improper privilege management that could allow an authorized local attacker to escalate privileges. The available sources (NVD/CVE records) confirm the issue but do not provide concrete details on...

CVE-2026-50312

CVE-2026-50312 is a Windows Ancillary Function Driver for WinSock use-after-free vulnerability that enables local privilege escalation when exploited. The initial description and connected sources confirm the affected component and root cause, and indicate the impact is elevation of privileges fo...

CVE-2026-50313

CVE-2026-50313 is a Windows NTFS heap-based buffer overflow vulnerability that could allow an attacker to achieve local code execution. The CVE entry describes a heap-based overflow in NTFS that enables exploitation by a privileged/unauthenticated attacker with local access, with the NVD entry al...

CVE-2026-50341

CVE-2026-50341 is a Windows NTFS information-disclosure issue caused by a buffer over-read. The vulnerability allows an authorized local attacker to disclose information from memory. Public documentation in connected sources confirms the affected component as NTFS and describes a local-exploitati...

CVE-2026-50412

CVE-2026-50412 is a Windows NTFS elevation-of-privilege vulnerability caused by a stack-based buffer overflow. The affected component is NTFS in Windows, allowing an authorized local attacker with low privileges and no user interaction to gain SYSTEM-level privileges (base CVSS v3.1: 7.8, Local, ...

CVE-2026-50429

CVE-2026-50429 describes an out-of-bounds read in the Windows Kernel that may allow a remote attacker to disclose information over a network. The entry is tied to Microsoft’s Windows kernel information-disclosure vulnerability with a base CVSSv3.1 score of 8.2 (Network, Low attack complexity, No ...

CVE-2026-50489

CVE-2026-50489 is a heap-based buffer overflow in Windows Win32K that allows an authorized, locally authenticated attacker to escalate privileges. The root cause is a memory corruption in the Win32K subsystem that leads to code execution with SYSTEM rights. The CVE entry is supported by multiple ...

CVE-2026-50692

CVE-2026-50692 is a Windows vulnerability in Desktop Window Manager (DWM): a heap-based buffer overflow that enables local privilege escalation by an authorized, low-privilege user with no user interaction. Public sources confirm the issue and Microsoft has released updates to address it; affecte...

CVE-2026-50697

The CVE-2026-50697 entry concerns a vulnerability in the Windows Common Log File System Driver that could allow an attacker with local access to elevate privileges. The issue is described as exposure of sensitive information to an unauthorized actor, enabling local privilege escalation. Public de...

CVE-2026-54983

The CVE-2026-54983 entry concerns a stack-based buffer overflow in Active Directory Federation Services (AD FS) that allows an unauthenticated, network-based attacker to trigger a denial of service. The authoritative sources describe the vulnerability as enabling network-ported DoS without requir...

CVE-2026-54995

CVE-2026-54995 refers to a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST). The flaw could allow an unauthenticated attacker to execute arbitrary code over the network. Public references in the provided docs (NVD, MSRC update guidance, and patch reviews) c...

CVE-2026-56649

CVE-2026-56649 is a race-condition in Windows Network File System that could let a remote attacker execute code over the network by abusing a shared resource. Public sources (NVD, EUVD, CIRCL) confirm the race condition as the root cause. Microsoft has released updates addressing this vulnerabili...

CVE-2026-57085

CVE-2026-57085 is a Windows Print Spooler vulnerability described as an out-of-bounds read in Print Spooler Components that allows an authorized, local attacker to disclose information. Connected sources confirm the affected component and local disclosure impact, with Microsoft and CVE trackers n...

CVE-2026-57096

CVE-2026-57096 affects Windows Routing and Remote Access Service (RRAS). The issue is a heap-based buffer overflow in RRAS that allows an authorized attacker to elevate privileges locally. The CVSSv3.1 base score is 7.8 (HIGH). Exploitation details are not provided beyond local privilege escalati...

CVE-2026-57976

The CVE-2026-57976 entry concerns Windows Active Directory Domain Services and is triggered by a null pointer dereference that can cause a denial of service over the network by an authorized attacker. The NVD entry corroborates a CVSS v3.1 base score of 6.5 (Medium), with NETWORK attack vector, L...

CVE-2026-58532

CVE-2026-58532 is a Windows Kernel elevation-of-privilege vulnerability: integer overflow/wraparound in the kernel could allow a local attacker to escalate privileges. Connected sources (NVD, EUVD/ENISA, CIRCL sightings) corroborate Windows Kernel impact and references to Microsoft security updat...

CVE-2026-49783

CVE-2026-49783 is a Windows Secure Boot issue described as an improperly implemented security check for the standard, enabling a local attacker with low privileges to bypass a security feature. The CVSS v3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, no user interac...

CVE-2026-49790

Technical details about CVE-2026-49790 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories for concrete technical information.

CVE-2026-50337

CVE-2026-50337 is a Windows Notification vulnerability described as an issue with an incorrect type conversion or cast that allows an authorized attacker to achieve local privilege escalation. The CVE is listed with a CVSS v3.1 base score of 7.8 (HIGH), indicating a local attack vector with low c...

CVE-2026-50362

CVE-2026-50362 is a Windows Resilient File System (ReFS) heap-based buffer overflow that allows local code execution. The issue affects the ReFS code path and, per sources, an unauthorized attacker with local access could run arbitrary code on the target system. Microsoft and corroborating source...

CVE-2026-50377

CVE-2026-50377 is a Windows Kernel elevation-of-privilege vulnerability described as an out-of-bounds read that enables an authorized local attacker to gain higher privileges. The connected materials consistently identify the Windows Kernel as the affected component and state the root cause as a ...

CVE-2026-50391

CVE-2026-50391 is a Microsoft Windows Group Policy privilege-escalation vulnerability. Affects Windows Group Policy functionality; root cause is improper privilege management that permits an authorized local attacker to elevate privileges. CVSS v3.1 base score 7.8 (High) with local, low attack co...

CVE-2026-50405

CVE-2026-50405 affects the Windows Filtering Platform (WFP). The issue is described as insufficient granularity of access control, enabling an authorized local attacker to elevate privileges. Connected sources (NVD, EUVD, CIRCL) corroborate the local privilege escalation impact and link to Micros...

CVE-2026-50417

CVE-2026-50417 is a Windows NTFS heap-based buffer overflow that could allow an authenticated, local attacker to execute arbitrary code. The vulnerability affects Windows NTFS components and is described as a local, privilege-leveraging scenario with HIGH impact (CVE-3.1, base score 7.8). Connect...

CVE-2026-50422

CVE-2026-50422 is a Windows NTFS vulnerability described as an out-of-bounds read that could let an authenticated, local attacker gain elevated privileges. Affected component: Windows NTFS (NTFS subsystem). Root cause: out-of-bounds read in NTFS code path. Impact: local privilege escalation and p...

CVE-2026-50447

CVE-2026-50447 is a Windows Message Queuing (MSMQ) remote-code-execution vulnerability. The issue is a heap-based buffer overflow in MSMQ that could allow an unauthenticated attacker to execute code over the network. Public sources indicate high-severity impact (CVSS v3.1: 9.8, network attack, no...

CVE-2026-50470

CVE-2026-50470 describes an out-of-bounds read in Windows Network Policy Server SNMP that could let an unauthenticated attacker disclose information over the network. The vulnerability affects the NPS SNMP handling and has a CVSS v3.1 base score of 7.5 (High) with network attack vector, low attac...

CVE-2026-50476

Microsoft Windows CVE-2026-50476 is a local privilege-escalation vulnerability in the Windows Network Connections Service caused by a use-after-free. Affected component is the Windows Network Connections Service; root cause is a use-after-free condition that enables an authorized attacker to elev...

CVE-2026-50492

CVE-2026-50492 describes a heap-based buffer overflow in the Windows Resilient File System (ReFS) that allows an unauthorized attacker to achieve remote code execution with a physical attack. The connected sources corroborate ReFS as the affected component and frame the impact as remote code exec...

CVE-2026-50496

CVE-2026-50496 is an out-of-bounds read vulnerability in Windows Network Policy Server SNMP that allows an unauthenticated attacker to disclose information over the network. Affects the SNMP component of Windows NPS; impact is information disclosure with a CVSS v3.1 base score of 7.5 (Network att...

CVE-2026-56194

CVE-2026-56194 : Heap-based buffer overflow in Windows Network File System (NFS) can allow an authorized attacker to elevate privileges over a network. Affected component is Windows NFS Server; root cause described as a heap-based overflow in the NFS networking path. The CVE entry indicates privi...

CVE-2026-56644

CVE-2026-56644 is a Windows Kernel elevation-of-privilege vulnerability described as a use-after-free in the DirectX Graphics Kernel. Exploitation would allow a local, authenticated attacker to escalate privileges. Public references indicate Microsoft has released updates (MSRC pages and related ...