Month: July 2026

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-49184 Windows NTFS Remote Code Execution Vulnerability→

Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability→

Improper link resolution before file access (‘link following’) in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. Continue reading CVE-2026-49180 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability→

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. Continue reading CVE-2026-49178 Windows Active Directory Domain Services Remote Code Execution Vulnerability→

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability→

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-48581 Surface Broker SDMA Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. Continue reading CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability→

Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network. Continue reading CVE-2026-47632 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability→