Baitaphish
Security intelligence
SearchLatest briefing
Data & Insights

CVE Explorer

Search one exact, source-linked CVE snapshot by CVE ID or explicit vendor and product tokens. Provider severity, KEV, conflicts, and stale state remain separate observations—not a Baitaphish risk rating.
Snapshot urn:baitaphish:cve-read-model-snapshot:v3:f2c3f72dcc196f8e7d63aa2d29709ad8b3fea39110eb2d563da5ce9b6fa9da89Released 2026-08-05T02:00:00Z
Exact snapshot results

353,537 CVE records

CVE ID descending · no relevance ranking

CVE-2026-50493

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows 10 Version 21H2, Windows Server 2019, Windows Server 2025 (Server Core installation), Windows 10 Version 22H2, Windows Server 2019 (Server Core installation), Windows 10 Version 1809, Windows 11 Version 25H2, Windows Server 2022, Windows Server 2025, Windows 11 version 26H1
Provider severity
HIGH
Conflicts
1

CVE-2026-50492

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2019 (Server Core installation), Windows Server 2016 (Server Core installation), Windows 10 Version 1809, Windows 11 version 26H1, Windows Server 2019, Windows Server 2022, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 10 Version 21H2, Windows Server 2016, Windows 11 Version 24H2, Windows 10 Version 22H2, Windows Server 2025, Windows 10 Version 1607
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50491

Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows Server 2025 (Server Core installation), Windows 10 Version 22H2, Windows Server 2012 R2, Windows Server 2022, Windows 11 version 26H1, Windows 11 Version 25H2, Windows 10 Version 21H2, Windows 10 Version 1809, Windows Server 2012, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2012 (Server Core installation), Windows Server 2025, Windows Server 2019 (Server Core installation), Windows Server 2016, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1607
Provider severity
HIGH
Conflicts
2

CVE-2026-50490

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2016, Windows Server 2012, Windows 10 Version 1809, Windows Server 2025 (Server Core installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows Server 2019 (Server Core installation), Windows Server 2019, Windows Server 2012 (Server Core installation), Windows Server 2016 (Server Core installation), Windows 10 Version 1607, Windows Server 2012 R2, Windows Server 2025, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows 10 Version 22H2
Provider severity
HIGH
Conflicts
1

CVE-2026-50489

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2016 (Server Core installation), Windows 10 Version 21H2, Windows 10 Version 1809, Windows 11 Version 25H2, Windows Server 2016, Windows 10 Version 22H2, Windows Server 2019, Windows 11 Version 24H2, Windows Server 2012 R2, Windows 10 Version 1607, Windows Server 2022, Windows Server 2025 (Server Core installation), Windows Server 2012 (Server Core installation), Windows Server 2012, Windows 11 version 26H1, Windows Server 2025, Windows Server 2019 (Server Core installation), Windows Server 2012 R2 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-50488

Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows Server 2025, Windows 11 Version 25H2, Windows Server 2025 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-50487

Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 version 26H1, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows Server 2025, Windows Server 2025 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-50486

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 22H2, Windows 11 version 26H1, Windows Server 2025, Windows 11 Version 25H2, Windows 11 Version 24H2, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-50485

Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012 R2 (Server Core installation), Windows Server 2019, Windows Server 2016, Windows 11 Version 25H2, Windows 11 Version 24H2, Windows Server 2012 R2, Windows 10 Version 1607, Windows Server 2019 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2025, Windows Server 2022, Windows Server 2016 (Server Core installation), Windows 10 Version 22H2, Windows 10 Version 1809, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation), Windows 11 version 26H1
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50484

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 25H2, Windows 11 Version 24H2, Windows 11 version 26H1, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1809, Windows Server 2025, Windows Server 2022
Provider severity
HIGH
Conflicts
1

CVE-2026-50483

Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 11 Version 24H2, Windows 11 version 26H1, Windows Server 2025
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50482

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012 R2, Windows Server 2012 (Server Core installation), Windows Server 2012, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation), Windows Server 2019 (Server Core installation), Windows 11 version 26H1, Windows Server 2019, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 11 Version 24H2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1809, Windows 11 Version 25H2, Windows Server 2025, Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2022
Provider severity
HIGH
Conflicts
1

CVE-2026-50480

Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012 R2, Windows 10 Version 1607, Windows Server 2012 (Server Core installation), Windows Server 2012, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-50479

Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 1809, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2019, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows Server 2025
Provider severity
HIGH
Conflicts
1

CVE-2026-50478

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 21H2, Windows Server 2019, Windows 10 Version 22H2, Windows 10 Version 1809, Windows Server 2025 (Server Core installation), Windows 11 version 26H1, Windows 11 Version 25H2, Windows 11 Version 24H2, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2025
Provider severity
HIGH
Conflicts
1

CVE-2026-50477

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1607, Windows 11 Version 25H2, Windows Server 2019, Windows 11 version 26H1, Windows Server 2019 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2012 (Server Core installation), Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2025, Windows Server 2016, Windows 11 Version 24H2, Windows 10 Version 22H2, Windows Server 2022, Windows 10 Version 21H2, Windows 10 Version 1809, Windows Server 2012 R2
Provider severity
HIGH
Conflicts
1

CVE-2026-50476

Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012, Windows 11 version 26H1, Windows 10 Version 1809, Windows 10 Version 21H2, Windows Server 2012 R2 (Server Core installation), Windows Server 2019 (Server Core installation), Windows 11 Version 24H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012 (Server Core installation), Windows Server 2022, Windows 11 Version 25H2, Windows Server 2025 (Server Core installation), Windows 10 Version 22H2, Windows Server 2012 R2, Windows Server 2019, Windows Server 2025, Windows 10 Version 1607
Provider severity
HIGH
Conflicts
1

CVE-2026-50475

Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2016, Windows Server 2025 (Server Core installation), Windows Server 2012 R2 (Server Core installation), Windows 11 version 26H1, Windows 10 Version 1607, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows 11 Version 24H2, Windows 10 Version 1809, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2022, Windows Server 2019, Windows 10 Version 22H2, Windows Server 2019 (Server Core installation), Windows Server 2025, Windows 11 Version 25H2, Windows 10 Version 21H2
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50474

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2019 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012 R2, Windows Server 2022, Windows 11 Version 24H2, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows 10 Version 1607, Windows Server 2012 R2 (Server Core installation), Windows Server 2019, Windows 10 Version 1809, Windows 11 version 26H1, Windows 11 Version 25H2
Provider severity
HIGH
Conflicts
1

CVE-2026-50473

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025, Windows 11 Version 24H2, Windows Server 2025 (Server Core installation), Windows 10 Version 1809, Windows 11 Version 25H2, Windows 10 Version 1607, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 11 version 26H1, Windows Server 2016 (Server Core installation), Windows Server 2016, Windows 10 Version 21H2, Windows Server 2022, Windows 10 Version 22H2
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50471

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2022, Windows Server 2012 R2, Windows Server 2012, Windows 11 version 23H2, Windows 11 Version 25H2, Windows 11 version 26H1, Windows Server 2016 (Server Core installation), Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1607, Windows Server 2019, Windows 10 Version 1809, Windows 11 Version 24H2, Windows Server 2025 (Server Core installation), Windows Server 2025, Windows 11 Version 23H2, Windows Server 2016, Windows 10 Version 21H2, Windows Server 2019 (Server Core installation), Windows 10 Version 22H2, Windows Server 2012 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-50470

Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 22H2, Windows 11 Version 25H2, Windows 11 Version 24H2, Windows 10 Version 1809, Windows 10 Version 1607, Windows Server 2025 (Server Core installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2012, Windows Server 2016 (Server Core installation), Windows Server 2019 (Server Core installation), Windows Server 2025, Windows Server 2012 R2, Windows Server 2012 (Server Core installation), Windows 11 version 26H1, Windows Server 2016, Windows Server 2022, Windows 10 Version 21H2, Windows Server 2019
Provider severity
HIGH
Conflicts
1

CVE-2026-50469

Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 version 26H1, Windows Server 2022, Windows Server 2019 (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 1809, Windows 11 Version 25H2, Windows Server 2019, Windows Server 2025, Windows 10 Version 22H2, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-50468

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

PUBLISHED
Vendor
Microsoft, Microsoft
Product
Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2025 (CU 6)
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50467

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC 2021, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2024, Microsoft Office 2016, Microsoft Office LTSC for Mac 2021, Microsoft Office 2019
Provider severity
HIGH
Conflicts
1

CVE-2026-50466

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 11 version 26H1, Windows 11 Version 25H2
Provider severity
HIGH
Conflicts
1

CVE-2026-50465

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025 (Server Core installation), Windows 11 Version 25H2, Windows 11 version 26H1, Windows Server 2025, Windows 11 Version 24H2
Provider severity
HIGH
Conflicts
1

CVE-2026-50463

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 21H2, Windows 11 version 26H1, Windows Server 2019, Windows 10 Version 1809, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows Server 2025, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 Version 25H2, Windows 11 Version 24H2
Provider severity
HIGH
Conflicts
1

CVE-2026-50462

External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 1607, Windows Server 2016, Windows Server 2012 R2, Windows Server 2019, Windows 11 Version 25H2, Windows 10 Version 1809, Windows Server 2012, Windows Server 2012 R2 (Server Core installation), Windows Server 2022, Windows 11 version 26H1, Windows Server 2025, Windows Server 2019 (Server Core installation), Windows 10 Version 21H2, Windows Server 2012 (Server Core installation), Windows 11 Version 24H2, Windows Server 2016 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 10 Version 22H2
Provider severity
HIGH
Conflicts
1

CVE-2026-50461

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012 R2, Windows 11 Version 24H2, Windows 10 Version 1607, Windows Server 2012 R2 (Server Core installation), Windows Server 2025, Windows 10 Version 22H2, Windows Server 2019, Windows 10 Version 21H2, Windows 11 Version 25H2, Windows Server 2016, Windows Server 2022, Windows Server 2016 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 10 Version 1809, Windows 11 version 26H1, Windows Server 2012, Windows Server 2019 (Server Core installation), Windows Server 2012 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-50460

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows Server 2025, Windows 11 Version 25H2, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation), Windows Server 2019, Windows 11 version 26H1, Windows 10 Version 1809, Windows Server 2022, Windows Server 2019 (Server Core installation), Windows 10 Version 22H2
Provider severity
HIGH
Conflicts
2

CVE-2026-5046

A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

PUBLISHED
Vendor
Tenda
Product
FH1201
Provider severity
HIGH
Conflicts
2

CVE-2026-50459

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 25H2, Windows 10 Version 22H2, Windows 10 Version 21H2, Windows Server 2022, Windows Server 2025 (Server Core installation), Windows 11 version 26H1, Windows Server 2025, Windows 11 Version 24H2
Provider severity
HIGH
Conflicts
1

CVE-2026-50458

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025, Windows 11 version 26H1, Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows 11 Version 25H2
Provider severity
HIGH
Conflicts
2

CVE-2026-50457

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2025, Windows 10 Version 21H2, Windows 11 Version 24H2, Windows 10 Version 22H2, Windows 10 Version 1809, Windows 11 version 26H1, Windows 11 Version 25H2
Provider severity
HIGH
Conflicts
2

CVE-2026-50456

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 10 Version 1809, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1607, Windows 10 Version 22H2, Windows Server 2022, Windows Server 2019 (Server Core installation), Windows Server 2012, Windows Server 2012 R2, Windows Server 2025, Windows Server 2016 (Server Core installation), Windows 11 version 26H1, Windows Server 2019, Windows Server 2012 (Server Core installation), Windows Server 2016, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation)
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50455

Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 25H2, Windows Server 2019 (Server Core installation), Windows Server 2019, Windows Server 2012 R2, Windows 11 Version 24H2, Windows 10 Version 21H2, Windows 10 Version 1607, Windows Server 2012, Windows 10 Version 22H2, Windows Server 2022, Windows Server 2025, Windows 11 version 26H1, Windows Server 2016, Windows Server 2025 (Server Core installation), Windows 10 Version 1809, Windows Server 2012 (Server Core installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation)
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50454

Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025, Windows 11 Version 25H2, Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows 11 version 26H1
Provider severity
HIGH
Conflicts
1

CVE-2026-50453

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012 (Server Core installation), Windows Server 2022, Windows 11 version 26H1, Windows Server 2019, Windows 11 Version 24H2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1607, Windows Server 2012, Windows 10 Version 22H2, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation), Windows Server 2012 R2, Windows Server 2019 (Server Core installation), Windows Server 2025, Windows 10 Version 1809, Windows 11 Version 25H2
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50452

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 1809, Windows Server 2025 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows Server 2022, Windows 11 Version 25H2, Windows 10 Version 21H2, Windows 11 version 26H1, Windows 10 Version 22H2
Provider severity
HIGH
Conflicts
2

CVE-2026-50451

Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 1809, Windows Server 2019, Windows Server 2025 (Server Core installation), Windows Server 2016 (Server Core installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2025, Windows 11 Version 24H2, Windows 10 Version 22H2, Windows 11 Version 25H2, Windows Server 2012 (Server Core installation), Windows 11 version 26H1, Windows 10 Version 1607, Windows 10 Version 21H2, Windows Server 2022, Windows Server 2019 (Server Core installation), Windows Server 2012, Windows Server 2012 R2
Provider severity
HIGH
Conflicts
1

CVE-2026-50450

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 21H2, Windows Server 2025, Windows 10 Version 22H2, Windows 11 Version 25H2, Windows Server 2019, Windows 11 Version 24H2, Windows 11 version 26H1, Windows Server 2019 (Server Core installation), Windows 10 Version 1809, Windows Server 2022, Windows Server 2025 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-5045

A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the component Parameter Handler. Performing a manipulation of the argument GO results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

PUBLISHED
Vendor
Tenda
Product
FH1201
Provider severity
HIGH
Conflicts
2

CVE-2026-50449

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 version 26H1, Windows Server 2025, Windows 10 Version 21H2, Windows Server 2019, Windows 10 Version 22H2, Windows Server 2022, Windows Server 2019 (Server Core installation), Windows 11 Version 25H2, Windows 10 Version 1809, Windows Server 2025 (Server Core installation), Windows 11 Version 24H2
Provider severity
HIGH
Conflicts
1

CVE-2026-50448

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012 (Server Core installation), Windows Server 2016, Windows Server 2019 (Server Core installation), Windows 10 Version 21H2, Windows 10 Version 1809, Windows Server 2012, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Windows Server 2019, Windows 11 Version 25H2, Windows Server 2025, Windows Server 2022, Windows 10 Version 1607, Windows Server 2012 R2, Windows 11 version 26H1
Provider severity
HIGH
Conflicts
1

CVE-2026-50447

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2019 (Server Core installation), Windows Server 2016, Windows 10 Version 22H2, Windows 10 Version 21H2, Windows Server 2025, Windows Server 2012 (Server Core installation), Windows 11 version 26H1, Windows Server 2022, Windows Server 2016 (Server Core installation), Windows 11 Version 25H2, Windows 11 Version 24H2, Windows Server 2019, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1809, Windows Server 2025 (Server Core installation), Windows Server 2012, Windows 10 Version 1607
Provider severity
CRITICAL
Conflicts
1

CVE-2026-50445

Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012 R2, Windows 11 version 26H1, Windows 10 Version 1607, Windows 11 Version 24H2, Windows Server 2012, Windows Server 2025, Windows Server 2022, Windows Server 2016 (Server Core installation), Windows 10 Version 21H2, Windows Server 2016, Windows Server 2019, Windows Server 2012 R2 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 10 Version 22H2, Windows Server 2012 (Server Core installation), Windows 11 Version 25H2, Windows Server 2019 (Server Core installation), Windows 10 Version 1809
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50444

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025 (Server Core installation), Windows 10 Version 1607, Windows Server 2012 R2 (Server Core installation), Windows Server 2012 R2, Windows Server 2016, Windows Server 2022, Windows Server 2012, Windows Server 2019, Windows Server 2016 (Server Core installation), Windows 10 Version 1809, Windows Server 2025, Windows Server 2019 (Server Core installation), Windows Server 2012 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-50442

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows 10 Version 1607, Windows Server 2016 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2019, Windows 10 Version 21H2, Windows Server 2016, Windows 10 Version 22H2, Windows 10 Version 1809, Windows 11 version 26H1, Windows Server 2022, Windows 11 Version 25H2, Windows Server 2025, Windows Server 2019 (Server Core installation)
Provider severity
MEDIUM
Conflicts
1

CVE-2026-50441

Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2019 (Server Core installation), Windows 11 Version 25H2, Windows 10 Version 22H2, Windows Server 2022, Windows Server 2016 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows 11 version 26H1, Windows Server 2019, Windows 10 Version 1607, Windows Server 2016, Windows 10 Version 21H2, Windows 10 Version 1809
Provider severity
HIGH
Conflicts
1