Security Risk Category
Windows Security Risks — Page 2
Published vulnerability pages connected to Windows. Each page keeps one canonical URL and focused remediation guidance.
216 published Windows risks
Windows risks
Showing 37–72 of 216 published risks.
CVE-2026-48571 windows 11 23h2 vulnerability
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-48572 windows 11 23h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49162 windows 11 24h2 vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49164 windows 10 1607 vulnerability
Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
Updated Jul 17, 2026
CVE-2026-49165 windows 10 1607 vulnerability
Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-49166 windows 11 24h2 vulnerability
Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49167 windows 10 1809 vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49168 windows 10 1607 vulnerability
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack.
Updated Jul 17, 2026
CVE-2026-49169 windows server 2025 vulnerability
Use after free in DNS Server allows an authorized attacker to execute code over a network.
Updated Jul 17, 2026
CVE-2026-49170 windows 10 1809 vulnerability
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49171 windows 10 1607 vulnerability
Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49794 windows 10 1607 vulnerability
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
Updated Jul 17, 2026
CVE-2026-49795 windows 10 1809 vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49796 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-49797 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-49798 windows 10 1607 vulnerability
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49799 windows 10 1607 vulnerability
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
Updated Jul 17, 2026
CVE-2026-49800 windows 10 1809 vulnerability
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49801 windows 10 1607 vulnerability
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-49802 windows 11 24h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49803 windows 10 1607 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49804 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Updated Jul 17, 2026
CVE-2026-49805 windows 10 1607 vulnerability
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49806 windows 11 24h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49807 windows 10 1809 vulnerability
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-49808 windows 11 24h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50293 windows 10 21h2 vulnerability
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50294 windows 10 1607 vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-50295 windows 11 24h2 vulnerability
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
Updated Jul 17, 2026
CVE-2026-50296 windows 10 1607 vulnerability
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50297 windows 10 1607 vulnerability
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50298 windows 10 1607 vulnerability
Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.
Updated Jul 17, 2026
CVE-2026-50299 windows 10 1607 vulnerability
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.
Updated Jul 17, 2026
CVE-2026-50300 windows 10 1607 vulnerability
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-50303 windows 10 1809 vulnerability
Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.
Updated Jul 17, 2026
CVE-2026-50308 windows 10 1607 vulnerability
Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026