TheWindowsUpdate.com

Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50346 Netlogon RPC Elevation of Privilege Vulnerability→

Improper limitation of a pathname to a restricted directory (‘path traversal’) in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-50460 Windows Runtime Elevation of Privilege Vulnerability→

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability→

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50410 Windows Runtime Elevation of Privilege Vulnerability→

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. Continue reading CVE-2026-50506 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability→

Information published. Continue reading CVE-2026-50366 Windows Active Directory Domain Services Denial of Service Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability→