Month: July 2026

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-58538 Windows Bluetooth Service Elevation of Privilege Vulnerability→

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. Continue reading CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability→

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability→

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally. Continue reading CVE-2026-57973 Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability→

Access of resource using incompatible type (‘type confusion’) in .NET Core allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-57108 .NET Denial of Service Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-57101 Visual Studio Code Security Feature Bypass Vulnerability→

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution Vulnerability→