Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50450 US
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-50429 US
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50475 US
Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-50415 US
Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50394 US
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-50444 veřejná správa US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-50474 US
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50362 US
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50420 US
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50438 Microsoft US
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-50447 US
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50417 US
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
EPSS 0.01 CVE-2026-50453 US
Information published.
EPSS 0.00 CVE-2026-50431 US
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50399 US
Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-50432 US
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50456 US
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50389 US
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50442 US
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50473 US
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50457 US
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-50439 Microsoft US
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
EPSS 0.00 CVE-2026-50465 Microsoft US
Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50409 US
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50435 US
Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50402 US
Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50455 US
Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50451 US
Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50367 US
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack.
EPSS 0.00 CVE-2026-50374 US
Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50421 US
Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50427 US
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50413 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50385 US
Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.
EPSS 0.01 CVE-2026-50426 US
Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-50365 US
Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50454 US
Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50469 US
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-50369 US
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50471 US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50437 US
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50436 US
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50382 US
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50352 US
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50344 US
Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-50445 US
Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50334 US
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50448 US
Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50405 US
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50397 US
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-50376 US
Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50346 US
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50401 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50378 US
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50423 US
Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-50418 US
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50391 US
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50433 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50403 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-50460 US