Month: July 2026

Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. Continue reading CVE-2026-50382 DirectX Graphics Kernel Remote Code Execution Vulnerability→

Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55011 Microsoft Defender Remote Code Execution Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50334 Windows Push Notification Information Disclosure Vulnerability→

Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-50338 Azure Spring Apps Elevation of Privilege Vulnerability→

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50397 Windows Kernel Elevation of Privilege Vulnerability→

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-55009 Microsoft Exchange Server Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Key Guard allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50378 Windows Key Guard Elevation of Privilege Vulnerability→

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability→