| CVE-2026-50695 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | high | 2026-07-16 |
| CVE-2026-50694 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | critical | 2026-07-16 |
| CVE-2026-50689 | Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50688 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50680 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50673 | Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50670 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50667 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50666 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network. | high | 2026-07-16 |
| CVE-2026-50665 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | low | 2026-07-16 |
| CVE-2026-50653 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network. | high | 2026-07-16 |
| CVE-2026-50652 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network. | high | 2026-07-16 |
| CVE-2026-50647 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | high | 2026-07-16 |
| CVE-2026-50520 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally. | high | 2026-07-16 |
| CVE-2026-50502 | Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network. | high | 2026-07-16 |
| CVE-2026-50497 | Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. | medium | 2026-07-16 |
| CVE-2026-50491 | Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50487 | Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. | high | 2026-07-16 |
| CVE-2026-50478 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50475 | Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. | medium | 2026-07-16 |
| CVE-2026-50467 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | high | 2026-07-16 |
| CVE-2026-50465 | Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. | high | 2026-07-16 |
| CVE-2026-50426 | Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network. | medium | 2026-07-16 |
| CVE-2026-50420 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally. | medium | 2026-07-16 |
| CVE-2026-50411 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | high | 2026-07-16 |
| CVE-2026-50408 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | medium | 2026-07-16 |
| CVE-2026-50405 | Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50400 | Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50391 | Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50389 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. | medium | 2026-07-16 |
| CVE-2026-50387 | Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50384 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50381 | Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally. | medium | 2026-07-16 |
| CVE-2026-50378 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50368 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | high | 2026-07-16 |
| CVE-2026-50364 | Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50356 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50355 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | high | 2026-07-16 |
| CVE-2026-50354 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50351 | Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50350 | Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally. | medium | 2026-07-16 |
| CVE-2026-50346 | Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50342 | Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50341 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. | medium | 2026-07-16 |
| CVE-2026-50333 | Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50331 | Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50327 | Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. | high | 2026-07-16 |
| CVE-2026-50326 | Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50325 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. | high | 2026-07-16 |
| CVE-2026-50324 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | medium | 2026-07-16 |
