TheWindowsUpdate.com

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-50508 Windows NTLM Spoofing Vulnerability→

Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-45599 Windows UPnP Device Host Remote Code Execution Vulnerability→

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-49161 Microsoft PC Manager Security Feature Bypass Vulnerability→

No cwe for this issue in Windows Kernel allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2025-10263 ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]→

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-48583 Windows Kernel Elevation of Privilege Vulnerability→

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-44813 Windows DWM Core Library Elevation of Privilege Vulnerability→

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2026-48578 Secure Boot Security Feature Bypass Vulnerability→

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-42987 Windows Deployment Services (WDS) Remote Code Execution→