Windows HTTP.sys CVE-2026-49787

Remote code execution in Windows IKE Extension (Internet Key Exchange) via double free memory corruption allows unauthen

Local privilege escalation in Microsoft Active Directory Federation Services (AD FS) lets an already-authenticated low-p

Windows Shell protection mechanism failure (CVE-2026-32202) allows remote attackers to perform spoofing attacks over a n

Local privilege escalation in the Microsoft Windows Kernel allows an unauthorized attacker to gain elevated (SYSTEM-leve

Local code execution in the Windows DHCP Client service stems from a use-after-free (CWE-416) memory-corruption flaw aff

Remote code execution in the Microsoft Windows DHCP Server role allows an unauthenticated network attacker to run arbitr

Local code execution in the Windows Media component of supported Windows 10, Windows 11, and Windows Server (2016 throug

Local privilege escalation via heap-based buffer overflow in the Windows Message Queuing (MSMQ) Queue Manager component

Local privilege escalation in Microsoft Windows Win32K lets an authenticated low-privileged user corrupt kernel heap mem

Local privilege escalation in the Windows NTFS file system driver lets an authenticated low-privileged user win a race c

Elevation of privilege in the Windows Hyper-V virtual network switch (VMSwitch) lets an authenticated attacker operating

Remote code execution in Microsoft Windows Remote Desktop (RDP) allows an unauthorized network attacker to run arbitrary