Common Vulnerabilities and Exposures (CVE)

CVE-2026-33113

Jun 26, 2026 19:41:24 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-50519

Jun 26, 2026 19:41:24 UTC

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

CVE-2026-50656

Jun 26, 2026 19:41:23 UTC

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". We are working to provide a high quality security update that addresses this ...

CVE-2026-26142

Jun 26, 2026 19:41:22 UTC

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

CVE-2026-50508

Jun 26, 2026 19:41:22 UTC

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-49161

Jun 26, 2026 19:41:21 UTC

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

CVE-2026-48583

Jun 26, 2026 19:41:21 UTC

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-48578

Jun 26, 2026 19:41:20 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48576

Jun 26, 2026 19:41:20 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48575

Jun 26, 2026 19:41:19 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48573

Jun 26, 2026 19:41:19 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48570

Jun 26, 2026 19:41:18 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48568

Jun 26, 2026 19:41:17 UTC

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-48566

Jun 26, 2026 19:41:17 UTC

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-48563

Jun 26, 2026 19:41:16 UTC

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.