CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability
Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-49807 Windows DirectX Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
Categories: Microsoft
CVE-2026-50342 Windows MIDI Service Module Elevation of Privileges Vulnerability
Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50298 Windows Spaceport.sys Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.
Categories: Microsoft
CVE-2026-49808 Windows Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50293 Windows Internal Task Bar Elevation of Privilege Vulnerability
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50316 Windows Kernel Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
Categories: Microsoft
CVE-2026-50354 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50296 DirectX Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50297 Win32k Elevation of Privilege Vulnerability
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50325 Win32k Elevation of Privilege Vulnerability
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50356 Microsoft Windows App Store Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50384 Windows Clip Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
CVE-2026-50295 Windows Zero Trust DNS Security Feature Bypass Vulnerability
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
Categories: Microsoft
CVE-2026-50350 Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.
Categories: Microsoft
CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally.
Categories: Microsoft
CVE-2026-50300 Windows DWM Core Library Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.
Categories: Microsoft
CVE-2026-50303 Windows Key Guard Security Feature Bypass Vulnerability
Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.
Categories: Microsoft
CVE-2026-50364 Windows Backup Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally.
Categories: Microsoft
