Month: July 2026

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50450 Windows Network Connections Service Elevation of Privilege Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-49807 Windows DirectX Information Disclosure Vulnerability→

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability→

Improper link resolution before file access (‘link following’) in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability→

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55949 Microsoft Excel Remote Code Execution Vulnerability→

Information published. Continue reading CVE-2026-50431 Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability→

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Continue reading CVE-2026-50494 Windows NTFS Remote Code Execution Vulnerability→

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability→