All Critical High Medium Low
CVE Severity CVSS EPSS First Seen Flags Description
CVE-2026-50345 high 7.0 0.0020 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-50343 high 7.8 0.0030 2026-10-29 1 PoC Improper privilege management in Microsoft Install Service allows an authorized attacker t
CVE-2026-50344 high 7.8 0.0030 2026-10-29 Improper authorization in Windows OLE allows an authorized attacker to elevate privileges
CVE-2026-50342 high 8.8 0.0030 2026-10-29 Improper access control in Windows MIDI Service Module allows an authorized attacker to el
CVE-2026-50340 high 8.5 0.0074 2026-10-29 Use after free in Windows Runtime allows an authorized attacker to elevate privileges over
CVE-2026-50336 high 7.8 0.0033 2026-10-29 Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privi
CVE-2026-50337 high 7.8 0.0033 2026-10-29 Incorrect type conversion or cast in Windows Notification allows an authorized attacker to
CVE-2026-50335 high 7.8 0.0030 2026-10-29 Improper access control in Windows Operating Systems allows an authorized attacker to elev
CVE-2026-50333 high 7.8 0.0030 2026-10-29 Missing authentication for critical function in Windows Spaceport.sys allows an authorized
CVE-2026-50332 high 7.8 0.0033 2026-10-29 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv
CVE-2026-50330 high 7.5 0.0125 2026-10-29 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to ele
CVE-2026-50331 high 7.8 0.0033 2026-10-29 Use after free in Windows Application Model allows an authorized attacker to elevate privi
CVE-2026-50328 high 7.5 0.0123 2026-10-29 Uncaught exception in Windows Server Update Service allows an unauthorized attacker to per
CVE-2026-50329 high 7.8 0.0033 2026-10-29 Use after free in Windows Kernel allows an authorized attacker to elevate privileges local
CVE-2026-50326 high 7.8 0.0033 2026-10-29 Use after free in Windows Unified Consent System allows an authorized attacker to elevate
CVE-2026-50327 high 7.8 0.0033 2026-10-29 Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code
CVE-2026-50325 high 7.0 0.0024 2026-10-29 Improper access control in Windows Win32K allows an authorized attacker to elevate privile
CVE-2026-50323 high 7.0 0.0026 2026-10-29 Use after free in Windows Runtime allows an authorized attacker to elevate privileges loca
CVE-2026-50321 high 7.8 0.0021 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-50322 high 7.0 0.0020 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-50318 high 7.8 0.0033 2026-10-29 Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized a
CVE-2026-50317 high 7.8 0.0021 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-50314 high 7.8 0.0047 2026-10-29 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally
CVE-2026-50315 high 7.8 0.0033 2026-10-29 Null pointer dereference in Windows Image Acquisition allows an authorized attacker to ele
CVE-2026-50313 high 7.8 0.0047 2026-10-29 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code
CVE-2026-50311 high 7.8 0.0030 2026-10-29 Improper access control in Windows Server allows an authorized attacker to elevate privile
CVE-2026-50309 high 7.8 0.0033 2026-10-29 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code l
CVE-2026-50308 high 7.8 0.0047 2026-10-29 Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to
CVE-2026-50306 high 7.8 0.0033 2026-10-29 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges local
CVE-2026-50307 high 7.0 0.0028 2026-10-29 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges local
CVE-2026-50304 high 7.5 0.0117 2026-10-29 Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized
CVE-2026-50305 high 7.8 0.0026 2026-10-29 Use after free in Microsoft Brokering File System allows an authorized attacker to elevate
CVE-2026-50301 high 7.8 0.0047 2026-10-29 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute
CVE-2026-50296 high 7.0 0.0026 2026-10-29 Use after free in Graphics Kernel allows an authorized attacker to elevate privileges loca
CVE-2026-50297 high 7.0 0.0024 2026-10-29 Improper access control in Windows Win32K allows an authorized attacker to elevate privile
CVE-2026-50293 high 7.8 0.0033 2026-10-29 Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privi
CVE-2026-49808 high 7.8 0.0020 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-49806 high 7.0 0.0020 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-49805 high 7.0 0.0024 2026-10-29 Improper access control in Windows Win32K allows an authorized attacker to elevate privile
CVE-2026-49803 high 7.0 0.0020 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-49802 high 7.0 0.0020 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-49800 high 7.8 0.0033 2026-10-29 Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows
CVE-2026-49796 high 7.8 0.0047 2026-10-29 Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code
CVE-2026-49797 high 7.8 0.0047 2026-10-29 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code
CVE-2026-49795 high 8.8 0.0033 2026-10-29 Use after free in Windows Kernel allows an authorized attacker to elevate privileges local
CVE-2026-49793 high 7.8 0.0033 2026-10-29 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized at
CVE-2026-49791 high 7.1 0.0038 2026-10-29 Improper link resolution before file access ('link following') in Windows Routing and Remo
CVE-2026-49792 high 7.8 0.0033 2026-10-29 Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized atta
CVE-2026-49790 high 7.3 0.0036 2026-10-29 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerabili
CVE-2026-49788 high 7.5 0.0117 2026-10-29 Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized atta