Výsledky hledání

zdroj: Microsoft Security× v celém archivu zrušit filtry

2906 karet z 2906 položek · strana 36 z 49 CZ · EN/orig

14. 7. 2026 36

CVE-2026-50407 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50407 US

Microsoft Security · 14. 7. 16:00

CVE-2026-48561 Microsoft Copilot Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-48561 Microsoft US

Microsoft Security · 14. 7. 16:00

CVE-2026-56159 DHCP Server Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-56159 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50343 Microsoft US

Microsoft Security · 14. 7. 16:00

CVE-2026-50697 Windows Common Log File System Driver Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50697 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50333 Windows Spaceport.sys Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50333 US

Microsoft Security · 14. 7. 16:00

CVE-2026-47301 Configuration Manager Elevation of Privilege Vulnerability

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-47301 Microsoft US

Microsoft Security · 14. 7. 16:00

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50422 US

Microsoft Security · 14. 7. 16:00

CVE-2026-56197 Windows Admin Center (WAC) Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-56197 veřejná správa US

Microsoft Security · 14. 7. 16:00

CVE-2026-55129 Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

EPSS 0.00 CVE-2026-55129 Microsoft US

Microsoft Security · 14. 7. 16:00

CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.

EPSS 0.00 CVE-2026-54128 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50493 DirectX Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50493 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

EPSS 0.00 CVE-2026-50341 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50416 Win32k Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

EPSS 0.00 CVE-2026-50416 US

Microsoft Security · 14. 7. 16:00

CVE-2026-55050 Microsoft Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

EPSS 0.01 CVE-2026-55050 Microsoft US

Microsoft Security · 14. 7. 16:00

CVE-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-47303 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50659 .NET Spoofing Vulnerability

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

EPSS 0.01 CVE-2026-50659 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

EPSS 0.00 CVE-2026-50357 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50476 Windows Network Connections Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50476 Microsoft US

Microsoft Security · 14. 7. 16:00

CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

EPSS 0.00 CVE-2026-50655 Microsoft US

Microsoft Security · 14. 7. 16:00

CVE-2026-58538 Windows Bluetooth Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-58538 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50687 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50461 Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

EPSS 0.00 CVE-2026-50461 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

EPSS 0.00 CVE-2026-50383 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50387 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50309 Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

EPSS 0.00 CVE-2026-50309 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50298 Windows Spaceport.sys Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.

EPSS 0.00 CVE-2026-50298 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50342 Windows MIDI Service Module Elevation of Privileges Vulnerability

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-50342 US

Microsoft Security · 14. 7. 16:00

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-49798 US

Microsoft Security · 14. 7. 16:00

CVE-2026-50313 Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

EPSS 0.00 CVE-2026-50313 US

Microsoft Security · 14. 7. 16:00

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

EPSS 0.00 CVE-2026-49162 Microsoft US

Microsoft Security · 14. 7. 16:00

CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-56188 US

Microsoft Security · 14. 7. 16:00