Month: July 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-58530 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability→

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Runtime allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability→

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58526 Windows Storage Elevation of Privilege Vulnerability→

Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-57982 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability→

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-58279 Azure CycleCloud Elevation of Privilege Vulnerability→

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability→