Month: June 2026

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-44804 Windows DWM Core Library Elevation of Privilege Vulnerability→

Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45592 Windows Internet (wininet.dll) Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability→

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-45591 ASP.NET Core Denial of Service Vulnerability→

Integer overflow or wraparound in Windows Win32K – GRFX allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-44803 Windows Graphics Component Remote Code Execution Vulnerability→

Improper link resolution before file access (‘link following’) in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45586 Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-42985 Remote Desktop Client Remote Code Execution Vulnerability→

Improper limitation of a pathname to a restricted directory (‘path traversal’) in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability→