CVE-2026-50300 Windows DWM Core Library Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50300 US
Výsledky hledání
60
CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50381 US
CVE-2026-50350 Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50350 US
CVE-2026-50295 Windows Zero Trust DNS Security Feature Bypass Vulnerability
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-50295 Microsoft US
CVE-2026-50384 Windows Clip Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50384 US
CVE-2026-50356 Microsoft Windows App Store Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50356 Microsoft US
CVE-2026-50296 DirectX Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50296 US
CVE-2026-50354 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50354 US
CVE-2026-50316 Windows Kernel Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50316 US
CVE-2026-50293 Windows Internal Task Bar Elevation of Privilege Vulnerability
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50293 US
CVE-2026-49808 Windows Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49808 US
CVE-2026-49807 Windows DirectX Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-49807 US
CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability
Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50351 US
CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50318 US
CVE-2026-50323 Windows Runtime Elevation of Privilege Vulnerability
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50323 US
CVE-2026-49803 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49803 US
CVE-2026-49806 Windows USB Print Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49806 US
CVE-2026-49802 Windows USB Print Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49802 US
CVE-2026-49801 Windows SMB Information Disclosure Vulnerability
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-49801 US
CVE-2026-50294 Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-50294 US
CVE-2026-49804 Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS 0.00 CVE-2026-49804 US
CVE-2026-50308 Windows NTFS Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50308 US
CVE-2026-49799 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-49799 US
CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49800 US
CVE-2026-50299 Windows Storage Spaces Direct Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.
EPSS 0.00 CVE-2026-50299 US
CVE-2026-49797 Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-49797 US
CVE-2026-49795 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49795 US
CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-49796 US
CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
EPSS 0.00 CVE-2026-49794 US
CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-49793 US
CVE-2026-49792 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-49792 US
CVE-2026-49791 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49791 US
CVE-2026-49790 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Information published.
EPSS 0.00 CVE-2026-49790 US
CVE-2026-49789 Windows NTFS Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49789 US
CVE-2026-49788 HTTP/2 Denial of Service Vulnerability
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-49788 US
CVE-2026-49787 HTTP.sys Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-49787 US
CVE-2026-49783 Secure Boot Security Feature Bypass Vulnerability
Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-49783 US
CVE-2026-49183 Windows Clipboard Server Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49183 US
CVE-2026-49184 Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-49184 US
CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-49181 US
CVE-2026-49180 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-49180 US
CVE-2026-49178 Windows Active Directory Domain Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-49178 veřejná správa US
CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-45646 US
CVE-2026-48581 Surface Broker SDMA Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-48581 Microsoft US
CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-48564 US
CVE-2026-47632 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
EPSS 0.00 CVE-2026-47632 US
CVE-2026-44800 Windows Push Notifications Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-44800 US
CVE-2026-40378 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-40378 veřejná správa US
CVE-2026-44806 Windows Secure Channel Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-44806 US
CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability
Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-34348 US
CVE-2026-41087 Windows File Explorer Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-41087 US
CVE-2026-40422 Windows File Explorer Information Disclosure Vulnerability
Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-40422 US
CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-34328 US
CVE-2026-33842 Windows File Explorer Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-33842 US
CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-58647 Microsoft US
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-58636 Microsoft US
CVE-2026-58635 Windows Narrator Braille Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-58635 US
CVE-2026-58631 Windows Admin Center (WAC) Remote Code Execution Vulnerability
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-58631 US
CVE-2026-58618 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-58618 Microsoft US
CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-58614 US