| CVE-2026-50499 | 7.8 | — | — | — | microsoft / windows 10 1809 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges | 92d ago |
| CVE-2026-50498 | 7.8 | — | — | — | microsoft / windows 10 1607 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 92d ago |
| CVE-2026-50494 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | 92d ago |
| CVE-2026-50493 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50488 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Serv | 92d ago |
| CVE-2026-50486 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50484 | 7.8 | — | — | — | microsoft / windows 10 1809 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50480 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to el | 92d ago |
| CVE-2026-50479 | 7.8 | — | — | — | microsoft / windows 10 1809 | Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locall | 92d ago |
| CVE-2026-50478 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50476 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50471 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 92d ago |
| CVE-2026-50469 | 7.8 | — | — | — | microsoft / windows 10 1809 | Improper link resolution before file access ('link following') in Windows Projected File System allows an authoriz | 92d ago |
| CVE-2026-50467 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 92d ago |
| CVE-2026-50466 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50462 | 7.8 | — | — | — | microsoft / windows 10 1607 | External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attack | 92d ago |
| CVE-2026-50461 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 92d ago |
| CVE-2026-50458 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50457 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50454 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally | 92d ago |
| CVE-2026-50450 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wi | 92d ago |
| CVE-2026-50448 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 92d ago |
| CVE-2026-50441 | 7.8 | — | — | — | microsoft / windows 10 1607 | Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate pri | 92d ago |
| CVE-2026-50440 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Servi | 92d ago |
| CVE-2026-50436 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50435 | 7.8 | — | — | — | microsoft / windows 10 1607 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50433 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50427 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50425 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally | 92d ago |
| CVE-2026-50423 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50422 | 7.8 | — | — | — | microsoft / windows 10 1607 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50421 | 7.8 | — | — | — | microsoft / windows 10 1607 | Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry | 92d ago |
| CVE-2026-50417 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | 92d ago |
| CVE-2026-50412 | 7.8 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50407 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privil | 92d ago |
| CVE-2026-50405 | 7.8 | — | — | — | microsoft / windows 10 1607 | Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to el | 92d ago |
| CVE-2026-50402 | 7.8 | — | — | — | microsoft / windows 10 1607 | Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges loc | 92d ago |
| CVE-2026-50400 | 7.8 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50399 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50391 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50388 | 7.8 | — | — | — | microsoft / windows 10 1607 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally. | 92d ago |
| CVE-2026-50387 | 7.8 | — | — | — | microsoft / 365 copilot | Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50386 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 92d ago |
| CVE-2026-50378 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard a | 92d ago |
| CVE-2026-50373 | 7.8 | — | — | — | microsoft / windows 10 1809 | Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges | 92d ago |
| CVE-2026-50367 | 7.8 | — | — | — | microsoft / windows 10 1809 | Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacke | 92d ago |
| CVE-2026-50363 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges local | 92d ago |
| CVE-2026-50362 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code | 92d ago |
| CVE-2026-50361 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50357 | 7.8 | — | — | — | microsoft / windows 10 1607 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code loc | 92d ago |
| CVE-2026-50353 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50347 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally. | 92d ago |
| CVE-2026-50346 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50344 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50343 | 7.8 | — | — | — | microsoft / windows 10 1809 | Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges loc | 92d ago |
| CVE-2026-50337 | 7.8 | — | — | — | microsoft / windows 10 1607 | Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges loca | 92d ago |
| CVE-2026-50336 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50335 | 7.8 | — | — | — | microsoft / windows 10 1809 | Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50332 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 92d ago |
| CVE-2026-50331 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally. | 92d ago |