Common Vulnerabilities and Exposures (CVE)

CVE-2026-58537

Jul 24, 2026 19:36:09 UTC

Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges locally.

CVE-2026-58532

Jul 24, 2026 19:36:08 UTC

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-58531

Jul 24, 2026 19:36:08 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2026-58540

Jul 24, 2026 19:36:07 UTC

Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-58539

Jul 24, 2026 19:36:07 UTC

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-58546

Jul 24, 2026 19:36:06 UTC

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-58535

Jul 24, 2026 19:36:06 UTC

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-58533

Jul 24, 2026 19:36:05 UTC

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-58538

Jul 24, 2026 19:36:05 UTC

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-58530

Jul 24, 2026 19:36:04 UTC

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

CVE-2026-58528

Jul 24, 2026 19:36:04 UTC

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-58527

Jul 24, 2026 19:36:03 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-58525

Jul 24, 2026 19:36:03 UTC

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-58524

Jul 24, 2026 19:36:02 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-58523

Jul 24, 2026 19:36:02 UTC

Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.