Month: July 2026

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Network File System allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-56649 Windows Network File System Remote Code Execution Vulnerability→

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability→

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-56647 Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability→

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-56170 ASP.NET Core Denial of Service Vulnerability→

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-54124 Windows Terminal Remote Code Execution Vulnerability→

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-56643 DirectX Graphics Kernel Elevation of Privilege Vulnerability→

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-56178 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability→

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network. Continue reading CVE-2026-56196 Windows Admin Center (WAC) Remote Code Execution Vulnerability→