Month: July 2026

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50410 Windows Runtime Elevation of Privilege Vulnerability→

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-50506 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability→

Information published. Continue reading CVE-2026-50366 Windows Active Directory Domain Services Denial of Service Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Runtime allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50345 Windows Runtime Elevation of Privilege Vulnerability→

Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally. Continue reading CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability→

Loop with unreachable exit condition (‘infinite loop’) in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-50324 Windows Active Directory Federation Services Denial of Service Vulnerability→

Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. Continue reading CVE-2026-49174 DNS Client Tampering Vulnerability→