Common Vulnerabilities and Exposures (CVE)

CVE-2026-32226

Apr 21, 2026 19:19:51 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.

CVE-2026-32224

Apr 21, 2026 19:19:50 UTC

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-32223

Apr 21, 2026 19:19:50 UTC

Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-32222

Apr 21, 2026 19:19:49 UTC

Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2026-32221

Apr 21, 2026 19:19:49 UTC

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

CVE-2026-32220

Apr 21, 2026 19:19:48 UTC

Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

CVE-2026-32219

Apr 21, 2026 19:19:48 UTC

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-32218

Apr 21, 2026 19:19:47 UTC

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-32217

Apr 21, 2026 19:19:46 UTC

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-32216

Apr 21, 2026 19:19:46 UTC

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally.

CVE-2026-32215

Apr 21, 2026 19:19:45 UTC

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-32202

Apr 21, 2026 19:19:45 UTC

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-32195

Apr 21, 2026 19:19:44 UTC

Stack-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-32192

Apr 21, 2026 19:19:43 UTC

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

CVE-2026-32189

Apr 21, 2026 19:19:43 UTC

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.