今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。
← 返回归档列表CVE-2026-50370
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent netwo
CVE-2026-50369
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-50367
Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to e
CVE-2026-50363
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-50362
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code local
CVE-2026-50361
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2026-50360
Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate priv
CVE-2026-50359
Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.
CVE-2026-50358
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-50357
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
CVE-2026-50353
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVE-2026-50352
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attack
CVE-2026-50348
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an
CVE-2026-50346
Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.
CVE-2026-50345
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an
CVE-2026-50344
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.
CVE-2026-50343
Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
CVE-2026-50340
Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network.
CVE-2026-50339
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker t
CVE-2026-50337
Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.