CVE-2026-50487 Windows DNS Client Elevation of Privilege Vulnerability
Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-50487 Microsoft US
Výsledky hledání
Různé zkratky a hodnoty pod každou zprávou mají svoji legendu — pokud na údaji postojíte myší. Některé jsou klikatelné. Typicky CVE.
59
CVE-2026-50483 Windows Graphics Component Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50483 Microsoft US
CVE-2026-50495 DNS Client Tampering Vulnerability
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
EPSS 0.00 CVE-2026-50495 Microsoft US
CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50438 Microsoft US
CVE-2026-50439 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-50439 Microsoft US
CVE-2026-50465 Windows DNS Client Tampering Vulnerability
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
EPSS 0.00 CVE-2026-50465 Microsoft US
CVE-2026-50373 Windows Search Service Elevation of Privilege Vulnerability
Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50373 Microsoft US
CVE-2026-50361 Microsoft Brokering File System Elevation of Privilege Vulnerability
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50361 Microsoft US
CVE-2026-50329 Microsoft DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-50329 Microsoft US
CVE-2026-50305 Microsoft Brokering File System Elevation of Privilege Vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50305 Microsoft US
CVE-2026-50295 Windows Zero Trust DNS Security Feature Bypass Vulnerability
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-50295 Microsoft US
CVE-2026-50356 Microsoft Windows App Store Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50356 Microsoft US
CVE-2026-48581 Surface Broker SDMA Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-48581 Microsoft US
CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-58647 Microsoft US
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-58636 Microsoft US
CVE-2026-58618 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-58618 Microsoft US
CVE-2026-58610 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-58610 Microsoft US
CVE-2026-58609 Windows Graphics Component Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-58609 Microsoft US
CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-58595 Microsoft US
CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.
EPSS 0.00 CVE-2026-57097 Microsoft US
CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-56193 Microsoft US
CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
KEV ✓ EPSS 0.22 CVE-2026-56164 Microsoft US
CVE-2026-55948 Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55948 Microsoft US
CVE-2026-55899 Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55899 Microsoft US
CVE-2026-54988 Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-54988 Microsoft US
CVE-2026-50678 Microsoft Excel Information Disclosure Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50678 Microsoft US
CVE-2026-50675 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50675 Microsoft US
CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability
External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-54108 Microsoft US
CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability
External control of file name or path in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-55002 Microsoft US
CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-54118 Microsoft US
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-54117 Microsoft US
CVE-2026-55012 Microsoft Defender Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55012 Microsoft US
CVE-2026-55011 Microsoft Defender Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55011 Microsoft US
CVE-2026-55009 Microsoft Exchange Server Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-55009 Microsoft US
CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-55006 Microsoft US
CVE-2026-55005 Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-55005 Microsoft US
CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-54992 Microsoft US
CVE-2026-55004 Windows Print Configuration Elevation of Privilege Vulnerability
Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-55004 Microsoft US
CVE-2026-54993 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-54993 Microsoft US
CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49784 Microsoft US
CVE-2026-49174 DNS Client Tampering Vulnerability
Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
EPSS 0.00 CVE-2026-49174 Microsoft US
CVE-2026-49171 Windows Speech Runtime Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49171 Microsoft US
CVE-2026-49166 Windows Print Configuration Elevation of Privilege Vulnerability
Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49166 Microsoft US
CVE-2026-49165 Microsoft Windows App Store Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-49165 Microsoft US
CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-42900 Microsoft US
CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-47296 Microsoft US
CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability
The Patch for this issue was released but the CVE was inadvertently left out of the Patch Tuesday June 2026 release
KEV ✓ EPSS 0.45 CVE-2026-58644 Microsoft US
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50458 Microsoft US
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50466 Microsoft US
CVE-2026-48561 Microsoft Copilot Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-48561 Microsoft US
CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability
Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
EPSS 0.04 CVE-2026-50343 Microsoft US
CVE-2026-47301 Configuration Manager Elevation of Privilege Vulnerability
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-47301 Microsoft US
CVE-2026-55129 Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55129 Microsoft US
CVE-2026-55050 Microsoft Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-55050 Microsoft US
CVE-2026-50476 Windows Network Connections Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-50476 Microsoft US
CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-50655 Microsoft US
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-49162 Microsoft US
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
Microsoft US
Forgotten UEFI shims undermining Secure Boot
ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities
1
CVE-2026-58281 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-58281 Microsoft US