CVE-2026-50xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
659 records · Page 3 of 7
InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Invoices::generate_xml() method appends a database-derived xml_id to the XMLconfigs helper directory and includes the resulting PHP path without validating the identifier. A low-privileged attacker who can influence the e-invoice configuration can use traversal sequenc
Updated- CVE-2026-50545: Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover 9.9 Critical
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, the Environment.spec.runtime.podSpec / spec.builder.podSpec passthrough lacked validation, and MergePodSpec propagated dangerous fields into the generated pods. This issue has been patched in version 1.24.0.
Updated NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at `src/platform/windows/misc.cpp` lives at `C:\ProgramData\LuminalShine\config\apps.json` and is created by the `SYSTEM` service. Under Windows' default `C:\ProgramData` inheritance, that gives `BUILTIN\Users` only Read+Execute — not w
UpdatedXibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on `POST /displaygroup/criteria/{displayGroupId}` allows an authenticated user to send criteria updates to any display via `XMR`. These criteria determine schedule changes and can alter playback, for example by causing content scheduled for
UpdatedXibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /layout/status/{id}` allow an authenticated user with any privileges to view the `status and metadata` of any layout, including layouts for which the user does not have view rights. This issue is fixed in version 4.4.3.
UpdatedXibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /dataset/export/csv/{id}` allow an authenticated user to export data from any dataset, including datasets created by administrators, by iterating over `sequential dataset IDs`. Exploitation requires access to the privilege a
UpdatedKata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated configuration path annotation. The runtime accepts an arbitrary io.katacontainers.config_path pod annotation and loads the referenced host TOML file without re
UpdatedXibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing object-level authorization on `/notification/export/{id}` allows an authenticated user to download attachments from any notification, including notifications created by administrators, by iterating over `sequential notification IDs`. Exploitation require
Updated- CVE-2026-50538: libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write 8.8 High
LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with attacker-controlled length, contents, and offset. It needs no authentication (the attacker is the server),
Updated DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a share mode chart data interface only validates that sceneId matches the resourceId in the link token and fails to validate whether tableId and field IDs in the request body belong to the shared resource, allowing an attacker with a valid share link token to replace dataset identifiers and retrieve unauthorized dat
UpdatedDataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/share/proxyInfo share interface generates and returns X-DE-LINK-TOKEN before validating the share password or ticket, allowing unauthenticated attackers who know a protected share UUID to obtain a valid link token for subsequent share-related API calls even with missing or invalid credentials. This issue
UpdatedIncorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.
UpdatedStack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
UpdatedImproper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
UpdatedAllocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
UpdatedImproper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.
UpdatedImproper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
UpdatedDeserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
UpdatedImproper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.
Updated- CVE-2026-50519: Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability 6.5 Medium
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Updated Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
UpdatedDeserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Updated- CVE-2026-50516: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability 9.4 Critical
Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.
Updated Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
UpdatedMissing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
UpdatedImproper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
UpdatedImproper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.
Updated- CVE-2026-50509: Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability 7.8 High
Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.
Updated Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
UpdatedMissing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
UpdatedAllocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
UpdatedUse after free in Windows Message Queuing allows an authorized attacker to execute code over a network.
UpdatedBuffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.
UpdatedInsufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.
UpdatedStack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
UpdatedUse after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.
UpdatedHeap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
UpdatedWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Updated- CVE-2026-50497: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability 6.5 Medium
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
Updated Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.
UpdatedImproper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
UpdatedHeap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
UpdatedUse after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack.
UpdatedOut-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedImproper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.
UpdatedUse after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
UpdatedBuffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
UpdatedHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedExposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
UpdatedModification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
UpdatedHeap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
UpdatedUntrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.
UpdatedBuffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedExposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
Updated- CVE-2026-50472: Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability 7.0 High
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
Updated Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
UpdatedOut-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.
UpdatedImproper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.
UpdatedBuffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
UpdatedUse after free in Microsoft Office allows an unauthorized attacker to execute code locally.
UpdatedUse after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
UpdatedImproper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
UpdatedOut-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
Updated- CVE-2026-50462: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Updated Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
UpdatedUse after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
UpdatedUse after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
UpdatedExposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
UpdatedUse of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
UpdatedRelative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
UpdatedMissing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Updated- CVE-2026-50447: Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability 9.8 Critical
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
Updated - CVE-2026-50445: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability 6.5 Medium
Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.
Updated Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network.
UpdatedExposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
UpdatedUntrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-50439: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability 8.1 High
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
Updated Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedBuffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Updated