Month: June 2026

No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. Continue reading CVE-2026-45602 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability→

Improper control of generation of code (‘code injection’) in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability→

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45596 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-26142 Nuance PowerScribe Remote Code Execution Vulnerability→

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-45598 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-50508 Windows NTLM Spoofing Vulnerability→

Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-45599 Windows UPnP Device Host Remote Code Execution Vulnerability→

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-49161 Microsoft PC Manager Security Feature Bypass Vulnerability→