Common Vulnerabilities and Exposures (CVE)

CVE-2026-49161

Jul 1, 2026 20:14:06 UTC

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

CVE-2026-48578

Jul 1, 2026 20:14:05 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48576

Jul 1, 2026 20:14:04 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48575

Jul 1, 2026 20:14:03 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48573

Jul 1, 2026 20:14:03 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48570

Jul 1, 2026 20:14:02 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48568

Jul 1, 2026 20:14:02 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48566

Jul 1, 2026 20:14:01 UTC

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-48563

Jul 1, 2026 20:14:01 UTC

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-47654

Jul 1, 2026 20:14:00 UTC

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-47652

Jul 1, 2026 20:14:00 UTC

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

CVE-2026-47653

Jul 1, 2026 20:13:59 UTC

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-47648

Jul 1, 2026 20:13:59 UTC

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-45588

Jul 1, 2026 20:13:58 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-47641

Jul 1, 2026 20:13:58 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.