Menu

Star on GitHub · 3.2k

2026

57,547 vulnerabilities published in 2026.

Results

57,547· Page 369/1151
5.5
CVE-2026-50434

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker t

7.8
CVE-2026-50433

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

5.3
CVE-2026-50432

Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.

5.5
CVE-2026-50431

Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability

5.5
CVE-2026-50430

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker t

8.2
CVE-2026-50429

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.

7.1
CVE-2026-50428

Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclo

7.8
CVE-2026-50427

Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally.

6.8
CVE-2026-50426

Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.

7.8
CVE-2026-50425

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

7.5
CVE-2026-50424

Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a networ

7.8
CVE-2026-50423

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-50422

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-50421

Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows

6.2
CVE-2026-50420

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.

3.3
CVE-2026-50419

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose i

5.1
CVE-2026-50418

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.

7.8
CVE-2026-50417

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

3.3
CVE-2026-50416

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose i

5.3
CVE-2026-50415

Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose

7.5
CVE-2026-50414

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an a

8.8
CVE-2026-50413

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-50412

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.5
CVE-2026-50411

Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny serv

7.0
CVE-2026-50410

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

5.5
CVE-2026-50409

Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to di

5.5
CVE-2026-50408

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

7.8
CVE-2026-50407

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges l

7.0
CVE-2026-50406

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-50405

Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate

7.0
CVE-2026-50404

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an a

7.0
CVE-2026-50403

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an

7.8
CVE-2026-50402

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.

5.5
CVE-2026-50401

Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information local

7.8
CVE-2026-50400

Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-50399

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

8.8
CVE-2026-50398

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an a

7.0
CVE-2026-50397

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-50396

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

5.5
CVE-2026-50394

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose in

7.0
CVE-2026-50393

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-50392

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-50391

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-50390

Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate

5.5
CVE-2026-50389

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

7.8
CVE-2026-50388

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally.

7.8
CVE-2026-50387

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-50386

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

8.8
CVE-2026-50385

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an

6.1
CVE-2026-50383

Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.