Author Archives: Syndicated News

Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50475 Windows Kernel Information Disclosure Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Clip Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50384 Windows Clip Service Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50679 Windows Search Service Elevation of Privilege Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. Continue reading CVE-2026-50434 Windows Push Notification Information Disclosure Vulnerability→

Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-50500 Windows Netlogon Elevation of Privilege Vulnerability→

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in Outlook Copilot allows an authorized attacker to perform tampering over a network. Continue reading CVE-2026-55145 Outlook Copilot Tampering Vulnerability→

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability→