Month: July 2026

Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-57089 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability→

Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack. Continue reading CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability→

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-57094 Microsoft Windows Media Foundation Remote Code Execution Vulnerability→

Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-56185 Windows Admin Center Information Disclosure Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-57095 Win32k Elevation of Privilege Vulnerability→

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability→

Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-57084 Windows File Explorer Information Disclosure Vulnerability→

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-54127 Windows Hyper-V Elevation of Privilege Vulnerability→