Month: July 2026

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-47290 Microsoft Office Remote Code Execution Vulnerability→

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability→

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50692 Desktop Window Manager Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Runtime allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-54125 Windows Runtime Elevation of Privilege Vulnerability→

Access of resource using incompatible type (‘type confusion’) in Windows OLE allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-50686 Windows OLE Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network. Continue reading CVE-2026-50683 Windows DHCP Client Elevation of Privilege Vulnerability→

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network. Continue reading CVE-2026-50682 Active Directory Denial of Service Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50681 Windows Secure Channel Information Disclosure Vulnerability→