Security Risk Category
Windows Security Risks — Page 3
Published vulnerability pages connected to Windows. Each page keeps one canonical URL and focused remediation guidance.
216 published Windows risks
Windows risks
Showing 73–108 of 216 published risks.
CVE-2026-50311 windows 10 1607 vulnerability
Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50316 windows 10 21h2 vulnerability
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-50318 windows 10 1607 vulnerability
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50323 windows 11 24h2 vulnerability
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50325 windows 10 1607 vulnerability
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50333 windows 10 1607 vulnerability
Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50342 windows 11 24h2 vulnerability
Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50350 windows 10 21h2 vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-50351 windows 10 1607 vulnerability
Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50354 windows 10 1607 vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50356 windows 10 1607 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50364 windows 10 21h2 vulnerability
Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50381 windows 10 21h2 vulnerability
Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-50384 windows 10 1809 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50694 windows 10 1607 vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Updated Jul 17, 2026
CVE-2026-50695 windows 10 1607 vulnerability
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
Updated Jul 17, 2026
CVE-2026-50696 windows 10 1809 vulnerability
Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
Updated Jul 17, 2026
CVE-2026-54114 windows 10 1809 vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-54119 windows 10 1607 vulnerability
Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network.
Updated Jul 17, 2026
CVE-2026-54122 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-54127 windows 11 24h2 vulnerability
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58631 windows admin center vulnerability
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-58635 windows 10 1809 vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58640 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-49177 windows 10 1607 vulnerability
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-50302 windows 10 21h2 vulnerability
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.
Updated Jul 17, 2026
CVE-2026-50304 windows 10 1607 vulnerability
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
Updated Jul 17, 2026
CVE-2026-50305 windows 11 24h2 vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50306 windows 10 1607 vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50307 windows 10 1809 vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50309 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-50310 windows 10 1809 vulnerability
Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-50312 windows 10 1607 vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50313 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-50315 windows 11 24h2 vulnerability
Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50317 windows 11 24h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026