OVERCLOCK.news
Back to security Live
security

CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

Updated an acknowledgement. This is an informational change only.

Microsoft  /  5 days ago
BlueskyXRedditMail
Revised 180 changes recorded since we first saw this, across 26 outlets
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  2. Version 55 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  4. Version 53 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  6. Version 51 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  8. Version 49 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  2. Version 56 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.”

    CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  3. Version 55 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability

    Acknowledgement Updated

  4. Version 54 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.”

    CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  5. Version 53 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability

    Acknowledgement Updated

  6. Version 52 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.”

    CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  7. Version 51 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability

    Acknowledgement Updated

  8. Version 50 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.”

    CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability

    Acknowledgement Updated

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.”

    CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Acknowledgement Updated

  3. Version 54 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.”

    CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Acknowledgement Updated

  5. Version 52 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.”

    CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Acknowledgement Updated

  7. Version 50 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.”

    CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Acknowledgement Updated

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Acknowledgement Updated

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    4 new sentences, beginning: “Information published.”

    CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

    Information published. This CVE was addressed by updates that were released in May 2026, but the CVE was inadvertently omitted from the May 2026 Security Updates. This is an informational change only. Customers who have already installed the May 2026 updates do not need to take any further action.

  2. Version 55 Summary changed

    2 new sentences, beginning: “This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure.”

    CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

    This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure. The CVE's Impact has been updated.

  3. Version 54 Summary changed

    4 new sentences, beginning: “Information published.”

    CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

    Information published. This CVE was addressed by updates that were released in May 2026, but the CVE was inadvertently omitted from the May 2026 Security Updates. This is an informational change only. Customers who have already installed the May 2026 updates do not need to take any further action.

  4. Version 53 Summary changed

    2 new sentences, beginning: “This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure.”

    CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

    This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure. The CVE's Impact has been updated.

  5. Version 52 Summary changed

    4 new sentences, beginning: “Information published.”

    CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

    Information published. This CVE was addressed by updates that were released in May 2026, but the CVE was inadvertently omitted from the May 2026 Security Updates. This is an informational change only. Customers who have already installed the May 2026 updates do not need to take any further action.

  6. Version 51 Summary changed

    2 new sentences, beginning: “This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure.”

    CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

    This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure. The CVE's Impact has been updated.

  7. Version 50 Summary changed

    4 new sentences, beginning: “Information published.”

    CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

    Information published. This CVE was addressed by updates that were released in May 2026, but the CVE was inadvertently omitted from the May 2026 Security Updates. This is an informational change only. Customers who have already installed the May 2026 updates do not need to take any further action.

  8. Version 49 Summary changed

    2 new sentences, beginning: “This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure.”

    CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

    This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure. The CVE's Impact has been updated.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

    This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure. The CVE's Impact has been updated.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.”

    CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

    Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.

  2. Version 55 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.”

    CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

    Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.

  4. Version 53 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.”

    CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

    Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.

  6. Version 51 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.”

    CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

    Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.

  8. Version 49 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.”

    CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

    Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

  2. Version 83 Summary changed

    2 new sentences, beginning: “Updated acknowledgment.”

    CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

    Updated acknowledgment. This is an informational change only.

  3. Version 82 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

    Acknowledgement Updated

  4. Version 81 Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.”

    CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

    Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

  5. Version 80 Summary changed

    2 new sentences, beginning: “Updated acknowledgment.”

    CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

    Updated acknowledgment. This is an informational change only.

  6. Version 79 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

    Acknowledgement Updated

  7. Version 78 Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.”

    CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

    Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

  8. Version 77 Summary changed

    2 new sentences, beginning: “Updated acknowledgment.”

    CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

    Updated acknowledgment. This is an informational change only.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability

    Acknowledgement Updated

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.”

    CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

    Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

  2. Version 83 Summary changed

    2 new sentences, beginning: “Acknowledgement added.”

    CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

    Acknowledgement added. This is an informational change only.

  3. Version 82 Summary changed

    1 new sentence, beginning: “Acknowledgment updated”

    CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

    Acknowledgment updated

  4. Version 81 Summary changed

    1 new sentence, beginning: “Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.”

    CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

    Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

  5. Version 80 Summary changed

    2 new sentences, beginning: “Acknowledgement added.”

    CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

    Acknowledgement added. This is an informational change only.

  6. Version 79 Summary changed

    1 new sentence, beginning: “Acknowledgment updated”

    CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

    Acknowledgment updated

  7. Version 78 Summary changed

    1 new sentence, beginning: “Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.”

    CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

    Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

  8. Version 77 Summary changed

    2 new sentences, beginning: “Acknowledgement added.”

    CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

    Acknowledgement added. This is an informational change only.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability

    Acknowledgment updated

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.”

    CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

    Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

    Acknowledgement Updated

  3. Version 54 Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.”

    CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

    Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

    Acknowledgement Updated

  5. Version 52 Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.”

    CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

    Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

    Acknowledgement Updated

  7. Version 50 Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.”

    CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

    Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

    Acknowledgement Updated

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

    Acknowledgement Updated

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose…”

    CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability

    Acknowledgement Updated

  3. Version 54 Summary changed

    1 new sentence, beginning: “Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose…”

    CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability

    Acknowledgement Updated

  5. Version 52 Summary changed

    1 new sentence, beginning: “Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose…”

    CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability

    Acknowledgement Updated

  7. Version 50 Summary changed

    1 new sentence, beginning: “Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose…”

    CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability

    Acknowledgement Updated

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability

    Acknowledgement Updated

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.”

    CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

    Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.

  2. Version 55 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.”

    CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

    Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.

  4. Version 53 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.”

    CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

    Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.

  6. Version 51 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.”

    CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

    Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.

  8. Version 49 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-54990 Remote Desktop Client Remote Code Execution Vulnerability

    Acknowledgement Updated

  2. As first published

    CVE-2026-54990 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Added supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability.”

    CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability

    Added supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability.

  2. As first published

    CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability

    Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-57085 Windows Print Spooler Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  2. As first published

    CVE-2026-57085 Windows Print Spooler Information Disclosure Vulnerability

    Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

    Acknowledgement Updated

  3. Version 54 Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

    Acknowledgement Updated

  5. Version 52 Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

    Acknowledgement Updated

  7. Version 50 Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

    Acknowledgement Updated

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability

    Acknowledgement Updated

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.”

    CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

    Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

    Acknowledgement Updated

  3. Version 54 Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.”

    CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

    Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

    Acknowledgement Updated

  5. Version 52 Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.”

    CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

    Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

    Acknowledgement Updated

  7. Version 50 Summary changed

    1 new sentence, beginning: “Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.”

    CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

    Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

    Acknowledgement Updated

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

    Acknowledgement Updated

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  2. Version 55 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  4. Version 53 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  6. Version 51 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.”

    CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  8. Version 49 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.”

    CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  2. Version 55 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.”

    CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  4. Version 53 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.”

    CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  6. Version 51 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.”

    CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  8. Version 49 Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated software table to remove clients versions because this vulnerability only impacts Windows Servers.”

    CVE-2026-62714 Windows DHCP Server Information Disclosure Vulnerability

    Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.

  2. As first published

    CVE-2026-62714 Windows DHCP Server Information Disclosure Vulnerability

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated software table to remove clients versions because this vulnerability only impacts Windows Servers.”

    CVE-2026-62715 Windows DHCP Server Information Disclosure Vulnerability

    Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.

  2. As first published

    CVE-2026-62715 Windows DHCP Server Information Disclosure Vulnerability

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated software table to remove clients versions because this vulnerability only impacts Windows Servers.”

    CVE-2026-62716 Windows DHCP Server Information Disclosure Vulnerability

    Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.

  2. As first published

    CVE-2026-62716 Windows DHCP Server Information Disclosure Vulnerability

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated software table to remove clients versions because this vulnerability only impacts Windows Servers.”

    CVE-2026-62718 Windows DHCP Server Information Disclosure Vulnerability

    Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.

  2. As first published

    CVE-2026-62718 Windows DHCP Server Information Disclosure Vulnerability

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated software table to remove clients versions because this vulnerability only impacts Windows Servers.”

    CVE-2026-62720 Windows DHCP Server Information Disclosure Vulnerability

    Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.

  2. As first published

    CVE-2026-62720 Windows DHCP Server Information Disclosure Vulnerability

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Added supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability.”

    CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability

    Added supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability.

  2. As first published

    CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability

    Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated software table to remove clients versions because this vulnerability only impacts Windows Servers.”

    CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability

    Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.

  2. As first published

    CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated software table to remove clients versions because this vulnerability only impacts Windows Servers.”

    CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability

    Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.

  2. As first published

    CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Read the current version at Microsoft →
Microsoft 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated software table to remove clients versions because this vulnerability only impacts Windows Servers.”

    CVE-2026-62814 Windows DHCP Server Information Disclosure Vulnerability

    Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.

  2. As first published

    CVE-2026-62814 Windows DHCP Server Information Disclosure Vulnerability

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Read the current version at Microsoft →

Versions are compared on the headline and summary the publisher puts in their feed. An edit to the body of an article that leaves both untouched will not appear here.

Why am I seeing this Ranked on source trust — Microsoft

It ranks mainly on source trust: Microsoft is the most reliable outlet we track on this subject, and is the only one on the story so far.

It clears the bar without leading strongly on any one factor. A middling score is not a claim that the story is important — only that nothing about it is weak.

Link-outLink-out, because it scores 0.39, below the 0.50 bar for a write-up. Link-out means we point at the publisher and say nothing of our own.

Blended score 0.386 — every figure below is computed, none of it is editorial.
FactorWeightScore ContributionWhere it came from
Corroboration 0.35 0.39 +0.135 35% 1 independent org on the story. Tier-3 aggregators never corroborate — they can show something is circulating, never that it is true.
Source trustleads 0.25 1.00 +0.250 65% Microsoft is the highest-trust source on this story and is first-party — the organisation announcing its own news. Trust is taken from the best source, not averaged.
Pickup rate 0.20 0.00 +0.000 0% One counted organisation, so there is no spread to measure — nothing has picked this up to set a rate.
Freshness 0.20 0.00 +0.000 0% Halves every 10 hours from the newest item on the story. This is the only factor that rewards a story for nothing more than being recent.

Corroboration counts distinct organisations, once each, and only from tiers 1 and 2. Freshness halves every 10 hours, so this ranking is a snapshot and will differ at the next build.

Read the full article at Microsoft →
1independent orgs
39story score
0velocity
100source trust
18151passes seen
Moderate CVE-2026-54128

Limited impact or meaningful preconditions.

Impact
Remote Code Execution
Product
Windows DHCP Client

How this story arrived

Ordered by when each source was first observed, which is what the velocity figure is computed from. Publishers backdate; observed order does not.

  1. 01 Microsoftfirst-party first seen CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability
  2. 02 Microsoftfirst-party +0m CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability
  3. 03 Microsoftfirst-party +0m CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability
  4. 04 Microsoftfirst-party +0m CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
  5. 05 Microsoftfirst-party +0m CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability
  6. 06 Microsoftfirst-party +0m CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  7. 07 Microsoftfirst-party +0m CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability
  8. 08 Microsoftfirst-party +0m CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability
  9. 09 Microsoftfirst-party +0m CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability
  10. 10 Microsoftfirst-party +0m CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability
  11. 11 Microsoftfirst-party +0m CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability
  12. 12 Microsoftfirst-party +0m CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability
  13. 13 Microsoftfirst-party +0m CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability
  14. 14 Microsoftfirst-party +0m CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability
  15. 15 Microsoftfirst-party +0m CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability
  16. 16 Microsoftfirst-party +0m CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability
  17. 17 Microsoftfirst-party +0m CVE-2026-61361 Windows DHCP Client Remote Code Execution Vulnerability
  18. 18 Microsoftfirst-party +0m CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability
  19. 19 Microsoftfirst-party +0m CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability
  20. 20 Microsoftfirst-party +0m CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability
  21. 21 Microsoftfirst-party +0m CVE-2026-61368 Windows Hyper-V Information Disclosure Vulnerability
  22. 22 Microsoftfirst-party +0m CVE-2026-61924 Windows Remote Desktop Client Information Disclosure Vulnerability
  23. 23 Microsoftfirst-party +0m CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability
  24. 24 Microsoftfirst-party +0m CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability
  25. 25 Microsoftfirst-party +0m CVE-2026-62718 Windows DHCP Server Information Disclosure Vulnerability
  26. 26 Microsoftfirst-party +0m CVE-2026-62715 Windows DHCP Server Information Disclosure Vulnerability
  27. 27 Microsoftfirst-party +0m CVE-2026-62716 Windows DHCP Server Information Disclosure Vulnerability
  28. 28 Microsoftfirst-party +0m CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability
  29. 29 Microsoftfirst-party +0m CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability
  30. 30 Microsoftfirst-party +0m CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability
  31. 31 Microsoftfirst-party +0m CVE-2026-62796 Windows NTFS Information Disclosure Vulnerability
  32. 32 Microsoftfirst-party +0m CVE-2026-65662 Windows GDI Information Disclosure Vulnerability
  33. 33 Microsoftfirst-party +0m CVE-2026-65784 Windows NTFS Information Disclosure Vulnerability
  34. 34 Microsoftfirst-party +0m CVE-2026-61352 Remote Desktop Client Remote Code Execution Vulnerability
  35. 35 Microsoftfirst-party +0m CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability
  36. 36 Microsoftfirst-party +0m CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability
  37. 37 Microsoftfirst-party +0m CVE-2026-61360 Windows GDI Information Disclosure Vulnerability
  38. 38 Microsoftfirst-party +0m CVE-2026-61918 Windows Remote Desktop Client Information Disclosure Vulnerability
  39. 39 Microsoftfirst-party +0m CVE-2026-61921 Windows Remote Desktop Client Information Disclosure Vulnerability
  40. 40 Microsoftfirst-party +0m CVE-2026-62709 Windows GDI+ Information Disclosure Vulnerability
  41. 41 Microsoftfirst-party +0m CVE-2026-62720 Windows DHCP Server Information Disclosure Vulnerability
  42. 42 Microsoftfirst-party +0m CVE-2026-62714 Windows DHCP Server Information Disclosure Vulnerability
  43. 43 Microsoftfirst-party +0m CVE-2026-62730 Windows Wired AutoConfig Service Information Disclosure Vulnerability
  44. 44 Microsoftfirst-party +0m CVE-2026-62782 Windows SMB Client Information Disclosure Vulnerability
  45. 45 Microsoftfirst-party +0m CVE-2026-62793 Windows NTFS Information Disclosure Vulnerability
  46. 46 Microsoftfirst-party +0m CVE-2026-62814 Windows DHCP Server Information Disclosure Vulnerability
  47. 47 Microsoftfirst-party +0m CVE-2026-62824 Remote Desktop Client Remote Code Execution Vulnerability
  48. 48 Microsoftfirst-party +0m CVE-2026-62887 Windows NTFS Information Disclosure Vulnerability
  49. 49 Microsoftfirst-party +0m CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability
  50. 50 Microsoftfirst-party +0m CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability
  51. 51 Microsoftfirst-party +0m CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability
  52. 52 Microsoftfirst-party +0m CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability
  53. 53 Microsoftfirst-party +0m CVE-2026-56171 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  54. 54 Microsoftfirst-party +0m CVE-2026-34349 Windows Media Information Disclosure Vulnerability
  55. 55 Microsoftfirst-party +0m CVE-2026-49165 Microsoft Windows App Store Information Disclosure Vulnerability
  56. 56 Microsoftfirst-party +0m CVE-2026-54990 Remote Desktop Client Remote Code Execution Vulnerability
  57. 57 Microsoftfirst-party +0m CVE-2026-54997 Windows SMB Information Disclosure Vulnerability
  58. 58 Microsoftfirst-party +0m CVE-2026-55003 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  59. 59 Microsoftfirst-party +0m CVE-2026-56185 Windows Admin Center Information Disclosure Vulnerability
  60. 60 Microsoftfirst-party +0m CVE-2026-57979 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  61. 61 Microsoftfirst-party +0m CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability
  62. 62 Microsoftfirst-party +0m CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability
  63. 63 Microsoftfirst-party +0m CVE-2026-50294 Windows Kernel Information Disclosure Vulnerability
  64. 64 Microsoftfirst-party +0m CVE-2026-49801 Windows SMB Information Disclosure Vulnerability
  65. 65 Microsoftfirst-party +0m CVE-2026-49807 Windows DirectX Information Disclosure Vulnerability
  66. 66 Microsoftfirst-party +0m CVE-2026-50316 Windows Kernel Information Disclosure Vulnerability
  67. 67 Microsoftfirst-party +0m CVE-2026-50300 Windows DWM Core Library Information Disclosure Vulnerability
  68. 68 Microsoftfirst-party +0m CVE-2026-50434 Windows Push Notification Information Disclosure Vulnerability
  69. 69 Microsoftfirst-party +0m CVE-2026-50339 Windows Push Notification Information Disclosure Vulnerability
  70. 70 Microsoftfirst-party +0m CVE-2026-50430 Windows Push Notification Information Disclosure Vulnerability
  71. 71 Microsoftfirst-party +0m CVE-2026-50310 Windows Human Interface Device Information Disclosure Vulnerability
  72. 72 Microsoftfirst-party +0m CVE-2026-50330 Windows Remote Desktop Client Elevation of Privilege Vulnerability
  73. 73 Microsoftfirst-party +0m CVE-2026-50463 Windows Kernel Information Disclosure Vulnerability
  74. 74 Microsoftfirst-party +0m CVE-2026-50334 Windows Push Notification Information Disclosure Vulnerability
  75. 75 Microsoftfirst-party +0m CVE-2026-50445 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  76. 76 Microsoftfirst-party +0m CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability
  77. 77 Microsoftfirst-party +0m CVE-2026-50437 Windows DWM Core Library Information Disclosure Vulnerability
  78. 78 Microsoftfirst-party +0m CVE-2026-50409 Windows Overlay Filter Information Disclosure Vulnerability
  79. 79 Microsoftfirst-party +0m CVE-2026-50474 Remote Desktop Client Remote Code Execution Vulnerability
  80. 80 Microsoftfirst-party +0m CVE-2026-50394 Windows Media Information Disclosure Vulnerability
  81. 81 Microsoftfirst-party +0m CVE-2026-50415 Windows Media Information Disclosure Vulnerability
  82. 82 Microsoftfirst-party +0m CVE-2026-50475 Windows Kernel Information Disclosure Vulnerability
  83. 83 Microsoftfirst-party +0m CVE-2026-50429 Windows Kernel Information Disclosure Vulnerability
  84. 84 Microsoftfirst-party +0m CVE-2026-50483 Windows Graphics Component Information Disclosure Vulnerability
  85. 85 Microsoftfirst-party +0m CVE-2026-50497 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  86. 86 Microsoftfirst-party +0m CVE-2026-50504 Windows Remote Desktop Client Information Disclosure Vulnerability
  87. 87 Microsoftfirst-party +0m CVE-2026-50681 Windows Secure Channel Information Disclosure Vulnerability
  88. 88 Microsoftfirst-party +0m CVE-2026-50690 Windows SMB Information Disclosure Vulnerability
  89. 89 Microsoftfirst-party +0m CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  90. 90 Microsoftfirst-party +0m CVE-2026-56186 Windows Secure Channel Information Disclosure Vulnerability
  91. 91 Microsoftfirst-party +0m CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability
  92. 92 Microsoftfirst-party +0m CVE-2026-57085 Windows Print Spooler Information Disclosure Vulnerability
  93. 93 Microsoftfirst-party +0m CVE-2026-57982 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  94. 94 Microsoftfirst-party +0m CVE-2026-58533 Windows Remote Desktop Client Information Disclosure Vulnerability
  95. 95 Microsoftfirst-party +0m CVE-2026-58535 Windows Remote Desktop Client Information Disclosure Vulnerability
  96. 96 Microsoftfirst-party +0m CVE-2026-58546 Windows Remote Desktop Client Information Disclosure Vulnerability
  97. 97 Microsoftfirst-party +0m CVE-2026-58539 Windows Remote Desktop Client Information Disclosure Vulnerability
  98. 98 Microsoftfirst-party +0m CVE-2026-58594 Remote Desktop Client Remote Code Execution Vulnerability
  99. 99 Microsoftfirst-party +0m CVE-2026-45634 Windows DHCP Client Information Disclosure Vulnerability
  100. 100 Microsoftfirst-party +0m CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability
  101. 101 Microsoftfirst-party +0m CVE-2026-47653 Remote Desktop Client Remote Code Execution Vulnerability
  102. 102 Microsoftfirst-party +0m CVE-2026-47654 Remote Desktop Client Remote Code Execution Vulnerability
  103. 103 Microsoftfirst-party +0m CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability
  104. 104 Microsoftfirst-party +0m CVE-2026-45594 Windows Application Identity (AppID) Information Disclosure Vulnerability
  105. 105 Microsoftfirst-party +0m CVE-2026-45604 Windows Managed Installer Information Disclosure Vulnerability
  106. 106 Microsoftfirst-party +0m CVE-2026-45608 Windows DHCP Client Information Disclosure Vulnerability
  107. 107 Microsoftfirst-party +0m CVE-2026-42908 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  108. 108 Microsoftfirst-party +0m CVE-2026-42909 Remote Desktop Client Remote Code Execution Vulnerability
  109. 109 Microsoftfirst-party +0m CVE-2026-42913 Remote Desktop Client Remote Code Execution Vulnerability
  110. 110 Microsoftfirst-party +0m CVE-2026-42972 Windows Hyper-V Information Disclosure Vulnerability
  111. 111 Microsoftfirst-party +0m CVE-2026-42969 Windows Push Notification Information Disclosure Vulnerability
  112. 112 Microsoftfirst-party +0m CVE-2026-42971 Windows Push Notification Information Disclosure Vulnerability
  113. 113 Microsoftfirst-party +0m CVE-2026-42970 Windows Push Notification Information Disclosure Vulnerability
  114. 114 Microsoftfirst-party +0m CVE-2026-42973 Windows Push Notification Information Disclosure Vulnerability
  115. 115 Microsoftfirst-party +0m CVE-2026-42992 Remote Desktop Client Remote Code Execution Vulnerability
  116. 116 Microsoftfirst-party +0m CVE-2026-44799 Remote Desktop Client Remote Code Execution Vulnerability
  117. 117 Microsoftfirst-party +0m CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability
  118. 118 Microsoftfirst-party +0m CVE-2026-42985 Remote Desktop Client Remote Code Execution Vulnerability

Overclock clusters coverage from independent sources and grades it automatically. The figures above are computed, not editorial. This page summarises and links to reporting by the outlets named — follow the links for the original work.