Browse CVEs

MEDIUM 6.8 CVE-2026-54132 Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,6002026-07-14 HIGH 8.8 CVE-2026-54117 Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. Sql Server 2016 13.0.6500.1 / 13.0.7095.1+ Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-54118 Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. Sql Server 2016 13.0.6500.1 / 13.0.7095.1+ Fix from $1,9502026-07-14 HIGH 8.4 CVE-2026-54122 Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 8.4 CVE-2026-54127 Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. Windows 11 24h2 10.0.20348.5386 / 10.0.26100.8875+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-54114 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.9020 / 10.0.19044.7548+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-54119 Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.0 CVE-2026-54111 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker… Windows 11 24h2 10.0.26100.8875 / 10.0.26100.33158+ Fix from $1,9502026-07-14 HIGH 7.0 CVE-2026-54112 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevat… Windows 10 1809 10.0.17763.9020 / 10.0.19044.7548+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-54109 Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.0 CVE-2026-54107 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevat… Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 MEDIUM 6.5 CVE-2026-54108 External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Sharepoint Server 16.0.19725.20434+ Fix from $1,6002026-07-14 CRITICAL 9.8 CVE-2026-50694 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $2,3002026-07-14 HIGH 7.8 CVE-2026-50675 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20175+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-50697 Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileg… Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50695 Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50696 Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. Windows 10 1809 10.0.17763.9020 / 10.0.19044.7548+ Fix from $1,9502026-07-14 CRITICAL 9.8 CVE-2026-50522 KEVEPSS 77% Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20434+ Fix from $2,3002026-07-14 HIGH 8.8 CVE-2026-50663 Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network. Age Of Empires Ii 177723+ Fix from $1,9502026-07-14 HIGH 8.4 CVE-2026-50520 Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute … Visual Studio Code 1.128.1+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50506 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. Asp.net Core Odata 7.8.0 / 9.5.0+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50652 Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network. .net Framework Patch available Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-50653 Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network. .net Framework Patch available Fix from $1,9502026-07-14 HIGH 7.0 CVE-2026-50384 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to … Windows 10 1809 10.0.17763.9020 / 10.0.19044.7548+ Fix from $1,9502026-07-14 MEDIUM 5.5 CVE-2026-50381 Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose informa… Windows 10 21h2 10.0.19044.7548 / 10.0.19045.7548+ Fix from $1,6002026-07-14 HIGH 8.8 CVE-2026-50342 Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Windows 11 24h2 10.0.26100.8875 / 10.0.26200.8875+ Fix from $1,9502026-07-14 HIGH 8.2 CVE-2026-50338 Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network. Azure Spring Cloud 7.3.0+ Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-50351 Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.3 CVE-2026-50364 Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally. Windows 10 21h2 10.0.19044.7548 / 10.0.19045.7548+ Fix from $1,9502026-07-14 HIGH 7.1 CVE-2026-50354 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14