Browse CVEs

HIGH 8.8 CVE-2026-54120 Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network. Surface Management Services No fix yet Fix from $1,9502026-07-24 CRITICAL 9.9 CVE-2026-50517 Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network. 365 Copilot No fix yet Fix from $2,3002026-07-24 MEDIUM 6.5 CVE-2026-49159 Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network. Graph No fix yet Fix from $1,6002026-07-24 HIGH 7.2 CVE-2026-35425 Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network. Azure Api Management No fix yet Fix from $1,9502026-07-24 MEDIUM 5.4 CVE-2026-57980 Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over… Edge Chromium 150.0.4078.80+ Fix from $1,6002026-07-17 HIGH 7.5 CVE-2026-56171 Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a netwo… Remote Desktop Web Client 2.1.65.2 / 2606+ Fix from $1,9502026-07-17 HIGH 7.5 CVE-2026-59117 Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network. Terminal No fix yet Fix from $1,9502026-07-16 MEDIUM 6.1 CVE-2026-58643 Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perfo… Windows Admin Center 2511+ Fix from $1,6002026-07-16 MEDIUM 5.4 CVE-2026-62826 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,6002026-07-16 HIGH 7.0 CVE-2026-58598 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to… Windows 10 21h2 10.0.19044.7548 / 10.0.19045.7548+ Fix from $1,9502026-07-16 HIGH 7.8 CVE-2026-50649 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. .net Framework 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-50650 Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally. .net Framework 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50651 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. .net 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 MEDIUM 6.5 CVE-2026-50659 Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. .net Framework 8.0.29 / 9.0.18+ Fix from $1,6002026-07-14 HIGH 8.2 CVE-2026-50528 Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. .net 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-50646 Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. .net Framework 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50524 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. .net 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50525 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. .net Framework 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50527 Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. .net Framework 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50648 Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. .net Framework 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 MEDIUM 5.5 CVE-2026-50526 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. .net 8.0.29 / 9.0.18+ Fix from $1,6002026-07-14 CRITICAL 9.8 CVE-2026-47304 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. .net Framework 8.0.29 / 9.0.18+ Fix from $2,3002026-07-14 HIGH 8.8 CVE-2026-47300 Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. .net 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-47301 Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. Configuration Manager 2503 Mitigation only Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-47303 Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. .net 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-47305 Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. Visual Studio 2022 17.12.22 / 17.14.36+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-47302 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. .net Framework 8.0.29 / 9.0.18+ Fix from $1,9502026-07-14 MEDIUM 5.5 CVE-2026-58638 Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally. Windows 10 1809 10.0.17763.9020 / 10.0.19044.7548+ Fix from $1,6002026-07-14 HIGH 7.8 CVE-2026-58632 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-58633 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. Windows 11 26h1 10.0.28000.2525+ Fix from $1,9502026-07-14