Month: July 2026

Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. Continue reading CVE-2026-50432 Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability→

External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50473 Windows File Explorer Information Disclosure Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in Visual Studio Code allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-50520 Visual Studio Code Remote Code Execution Vulnerability→

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. Continue reading CVE-2026-50465 Windows DNS Client Tampering Vulnerability→

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally. Continue reading CVE-2026-55144 Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability→

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50402 NTFS Elevation of Privilege Vulnerability→

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability→