LiveActive security incident?Get immediate response

CVE archive

July 2026

Browse CVE records published in July 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 50 of 9552 matching CVEs · Page 7 of 192.

High · CVSS 7.5

CVE-2026-50648: .NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50647: Active Directory Federation Server Denial of Service Vulnerability

Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50646: .NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.2

CVE-2026-50528: .NET Security Feature Bypass Vulnerability

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50527: .NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50526: .NET Tampering Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50525: .NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

Critical · CVSS 9.8

CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50510: GitHub Copilot Remote Code Execution Vulnerability

Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50509: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.8

CVE-2026-47295: Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.5

CVE-2026-50504: Windows Remote Desktop Client Information Disclosure Vulnerability

Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50496: Windows Network Policy Server SNMP Information Disclosure Vulnerability

Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.5

CVE-2026-50497: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50503: Windows Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50501: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.8

CVE-2026-50492: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50491: Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability

Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50505: Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability

Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50498: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50490: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50494: Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.8

CVE-2026-50489: Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50499: Windows Print Spooler Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50500: Windows Netlogon Elevation of Privilege Vulnerability

Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50488: Clipboard User Service Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.1

CVE-2026-50487: Windows DNS Client Elevation of Privilege Vulnerability

Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50486: Windows Runtime Elevation of Privilege Vulnerability

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 4.5

CVE-2026-50485: Windows Hyper-V Denial of Service Vulnerability

Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8

CVE-2026-50502: Windows Event Logging Service Remote Code Execution Vulnerability

Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50493: DirectX Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50484: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-50483: Windows Graphics Component Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.1

CVE-2026-50495: DNS Client Tampering Vulnerability

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.3

CVE-2026-50482: Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50480: Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50479: Windows USB Hub Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50478: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.8

CVE-2026-50477: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50459: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50470: Windows Network Policy Server SNMP Information Disclosure Vulnerability

Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50406: Windows Backup Engine Elevation of Privilege Vulnerability

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50424: Windows Domain Controller Denial of Service Vulnerability

Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50450: Windows Network Connections Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.2

CVE-2026-50429: Windows Kernel Information Disclosure Vulnerability

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50476: Windows Network Connections Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-50475: Windows Kernel Information Disclosure Vulnerability

Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50458: Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.3

CVE-2026-50415: Windows Media Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-50394: Windows Media Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.

Published Jul 14, 2026 · Updated Oct 8, 2026