Month: July 2026

Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability→

Improper neutralization of special elements used in an sql command (‘sql injection’) in SQL Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. Continue reading CVE-2026-34349 Windows Media Information Disclosure Vulnerability→

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. Continue reading CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows App Store allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. Continue reading CVE-2026-42975 Windows Bluetooth Port Driver Remote Code Execution→

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability→

Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50455 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability→