Month: July 2026

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-50460 Windows Runtime Elevation of Privilege Vulnerability→

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability→

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50410 Windows Runtime Elevation of Privilege Vulnerability→

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-50506 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability→

Information published. Continue reading CVE-2026-50366 Windows Active Directory Domain Services Denial of Service Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Runtime allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50345 Windows Runtime Elevation of Privilege Vulnerability→

Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally. Continue reading CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability→