CVE-2026-50489
Nov 1, 2026 UTC
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
Inspect record →CVSS8.8high
Vulnerability intelligence / live index
Recently updated CVEs
A working index of published vulnerability records, ordered by latest update. Open a record to inspect its score, vector, and impact metrics.
Data source
CVE Program / CVE List®
Updated continuously
CVE-2026-50499
Nov 1, 2026 UTC
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Inspect record →CVSS7.8high
CVE-2026-50500
Nov 1, 2026 UTC
Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.
Inspect record →CVSS7.5high
CVE-2026-50488
Nov 1, 2026 UTC
Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Inspect record →CVSS7.8high
CVE-2026-50487
Nov 1, 2026 UTC
Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.
Inspect record →CVSS8.1high
CVE-2026-50486
Nov 1, 2026 UTC
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
Inspect record →CVSS7.8high
CVE-2026-50485
Nov 1, 2026 UTC
Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
Inspect record →CVSS4.5medium
CVE-2026-50502
Nov 1, 2026 UTC
Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.
Inspect record →CVSS8.0high
CVE-2026-50493
Nov 1, 2026 UTC
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Inspect record →CVSS7.8high
CVE-2026-50484
Nov 1, 2026 UTC
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Inspect record →CVSS7.8high
CVE-2026-50483
Nov 1, 2026 UTC
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
Inspect record →CVSS5.5medium
CVE-2026-50495
Nov 1, 2026 UTC
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
Inspect record →CVSS6.1medium
CVE-2026-50482
Nov 1, 2026 UTC
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Inspect record →CVSS7.3high
CVE-2026-50480
Nov 1, 2026 UTC
Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
Inspect record →CVSS7.8high
CVE-2026-50479
Nov 1, 2026 UTC
Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.
Inspect record →CVSS7.8high