Month: July 2026

Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. Continue reading CVE-2026-49792 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability→

Improper link resolution before file access (‘link following’) in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49791 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability→

Information published. Continue reading CVE-2026-49790 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability→

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49789 Windows NTFS Elevation of Privilege Vulnerability→

Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-49788 HTTP/2 Denial of Service Vulnerability→

Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-49787 HTTP.sys Denial of Service Vulnerability→

Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-49783 Secure Boot Security Feature Bypass Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49183 Windows Clipboard Server Elevation of Privilege Vulnerability→