Month: July 2026

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Telephony Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50669 Windows Telephony Server Elevation of Privilege Vulnerability→

Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49176 Windows WalletService Elevation of Privilege Vulnerability→

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-50527 .NET Framework Denial of Service Vulnerability→

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49171 Windows Speech Runtime Elevation of Privilege Vulnerability→

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50490 Windows Installer Elevation of Privilege Vulnerability→

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability→

Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50479 Windows USB Hub Driver Elevation of Privilege Vulnerability→

Use after free in DNS Server allows an authorized attacker to execute code over a network. Continue reading CVE-2026-49169 Windows DNS Server Remote Code Execution Vulnerability→