🚨 CVE-2026-49793
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
🎖@cveNotify
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
🎖@cveNotify
🚨 CVE-2026-49794
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
🎖@cveNotify
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
🎖@cveNotify
🚨 CVE-2026-49795
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-49796
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
🎖@cveNotify
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
🎖@cveNotify
🚨 CVE-2026-49797
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
🎖@cveNotify
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
🎖@cveNotify
🚨 CVE-2026-49798
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
🎖@cveNotify
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-49799
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
🎖@cveNotify
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
🎖@cveNotify
🚨 CVE-2026-49800
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-49801
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
🎖@cveNotify
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
🎖@cveNotify
🚨 CVE-2026-49802
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-49805
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-49806
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-49807
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
🎖@cveNotify
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
🎖@cveNotify
🚨 CVE-2026-49808
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-50293
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-50294
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
🎖@cveNotify
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
🎖@cveNotify
🚨 CVE-2026-50295
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
🎖@cveNotify
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
🎖@cveNotify
🚨 CVE-2026-50296
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-50297
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
🎖@cveNotify
🚨 CVE-2026-50298
Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.
🎖@cveNotify
Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.
🎖@cveNotify
🚨 CVE-2026-50299
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.
🎖@cveNotify
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.
🎖@cveNotify