Author Archives: Syndicated News

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. Continue reading CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability→

Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-50340 Windows Runtime Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50394 Windows Media Information Disclosure Vulnerability→

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. Continue reading CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability→

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-54989 Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability→

Improper limitation of a pathname to a restricted directory (‘path traversal’) in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability→