Common Vulnerabilities and Exposures (CVE)
CVE-2026-45497
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.
CVE-2026-44804
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-44813
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-42993
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-44812
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2026-44803
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2026-42987
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVE-2026-42985
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-44801
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-44814
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-44802
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-42983
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-44815
Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.
CVE-2026-44799
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-44807
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.