# Vulnerabilities published in 2026


- [CVE-2026-50473](https://insights.sbomify.com/CVE-2026-50473/): Windows File Explorer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50472](https://insights.sbomify.com/CVE-2026-50472/): Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50471](https://insights.sbomify.com/CVE-2026-50471/): Windows NTFS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-50470](https://insights.sbomify.com/CVE-2026-50470/): Windows Network Policy Server SNMP Information Disclosure Vulnerability (high 7.5)
- [CVE-2026-5047](https://insights.sbomify.com/CVE-2026-5047/): Information disclosure in Brocade SANnav (high 8.2)
- [CVE-2026-50469](https://insights.sbomify.com/CVE-2026-50469/): Windows Projected File System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50468](https://insights.sbomify.com/CVE-2026-50468/): Microsoft SQL Server Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-50467](https://insights.sbomify.com/CVE-2026-50467/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-50466](https://insights.sbomify.com/CVE-2026-50466/): Microsoft Brokering File System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50465](https://insights.sbomify.com/CVE-2026-50465/): Windows DNS Client Tampering Vulnerability (high 7.1)
- [CVE-2026-50463](https://insights.sbomify.com/CVE-2026-50463/): Windows Kernel Information Disclosure Vulnerability (high 7.5)
- [CVE-2026-50462](https://insights.sbomify.com/CVE-2026-50462/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50461](https://insights.sbomify.com/CVE-2026-50461/): Windows NTFS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-50460](https://insights.sbomify.com/CVE-2026-50460/): Windows Runtime Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2026-5046](https://insights.sbomify.com/CVE-2026-5046/): Tenda FH1201 Parameter WrlExtraSet formWrlExtraSet stack-based overflow (high 8.7)
- [CVE-2026-50459](https://insights.sbomify.com/CVE-2026-50459/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50458](https://insights.sbomify.com/CVE-2026-50458/): Microsoft Brokering File System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50457](https://insights.sbomify.com/CVE-2026-50457/): Windows Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50456](https://insights.sbomify.com/CVE-2026-50456/): Windows File Explorer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50455](https://insights.sbomify.com/CVE-2026-50455/): Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50454](https://insights.sbomify.com/CVE-2026-50454/): Windows User Interface Core Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50453](https://insights.sbomify.com/CVE-2026-50453/): Windows USB Audio Class Driver Information Disclosure Vulnerability (medium 6.1)
- [CVE-2026-50452](https://insights.sbomify.com/CVE-2026-50452/): Windows Runtime Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50451](https://insights.sbomify.com/CVE-2026-50451/): Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-50450](https://insights.sbomify.com/CVE-2026-50450/): Windows Network Connections Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-5045](https://insights.sbomify.com/CVE-2026-5045/): Tenda FH1201 Parameter WrlclientSet stack-based overflow (high 8.7)
- [CVE-2026-50449](https://insights.sbomify.com/CVE-2026-50449/): Windows Runtime Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50448](https://insights.sbomify.com/CVE-2026-50448/): Windows NTFS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-50447](https://insights.sbomify.com/CVE-2026-50447/): Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-50445](https://insights.sbomify.com/CVE-2026-50445/): Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-50444](https://insights.sbomify.com/CVE-2026-50444/): Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-50442](https://insights.sbomify.com/CVE-2026-50442/): Windows File Explorer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50441](https://insights.sbomify.com/CVE-2026-50441/): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50440](https://insights.sbomify.com/CVE-2026-50440/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-5044](https://insights.sbomify.com/CVE-2026-5044/): Belkin F9K1122 Setting formSetSystemSettings stack-based overflow (high 8.7)
- [CVE-2026-50439](https://insights.sbomify.com/CVE-2026-50439/): Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-50438](https://insights.sbomify.com/CVE-2026-50438/): Microsoft PC Manager Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-50437](https://insights.sbomify.com/CVE-2026-50437/): Windows DWM Core Library Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50436](https://insights.sbomify.com/CVE-2026-50436/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50435](https://insights.sbomify.com/CVE-2026-50435/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50434](https://insights.sbomify.com/CVE-2026-50434/): Windows Push Notification Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50433](https://insights.sbomify.com/CVE-2026-50433/): Windows Media Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50432](https://insights.sbomify.com/CVE-2026-50432/): Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability (medium 5.3)
- [CVE-2026-50431](https://insights.sbomify.com/CVE-2026-50431/): Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50430](https://insights.sbomify.com/CVE-2026-50430/): Windows Push Notification Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-5043](https://insights.sbomify.com/CVE-2026-5043/): Belkin F9K1122 Parameter formSetPassword stack-based overflow (high 8.7)
- [CVE-2026-50429](https://insights.sbomify.com/CVE-2026-50429/): Windows Kernel Information Disclosure Vulnerability (high 8.2)
- [CVE-2026-50428](https://insights.sbomify.com/CVE-2026-50428/): Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability (high 7.1)
- [CVE-2026-50427](https://insights.sbomify.com/CVE-2026-50427/): Content Delivery Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50426](https://insights.sbomify.com/CVE-2026-50426/): Windows DNS Server Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2026-50425](https://insights.sbomify.com/CVE-2026-50425/): Windows Internal System User Profile Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50424](https://insights.sbomify.com/CVE-2026-50424/): Windows Domain Controller Denial of Service Vulnerability (high 7.5)
- [CVE-2026-50423](https://insights.sbomify.com/CVE-2026-50423/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50422](https://insights.sbomify.com/CVE-2026-50422/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50421](https://insights.sbomify.com/CVE-2026-50421/): Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50420](https://insights.sbomify.com/CVE-2026-50420/): HTTP.sys Information Disclosure Vulnerability (medium 6.2)
- [CVE-2026-5042](https://insights.sbomify.com/CVE-2026-5042/): Belkin F9K1122 Parameter formCrossBandSwitch stack-based overflow (high 8.7)
- [CVE-2026-50419](https://insights.sbomify.com/CVE-2026-50419/): Windows Kernel Information Disclosure Vulnerability (low 3.3)
- [CVE-2026-50418](https://insights.sbomify.com/CVE-2026-50418/): Windows System Secure Feature Bypass Vulnerability (medium 5.1)
- [CVE-2026-50417](https://insights.sbomify.com/CVE-2026-50417/): Windows NTFS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-50416](https://insights.sbomify.com/CVE-2026-50416/): Win32k Information Disclosure Vulnerability (low 3.3)
- [CVE-2026-50415](https://insights.sbomify.com/CVE-2026-50415/): Windows Media Information Disclosure Vulnerability (medium 5.3)
- [CVE-2026-50414](https://insights.sbomify.com/CVE-2026-50414/): Windows Media Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2026-50413](https://insights.sbomify.com/CVE-2026-50413/): Windows Runtime Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-50412](https://insights.sbomify.com/CVE-2026-50412/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50411](https://insights.sbomify.com/CVE-2026-50411/): Windows Active Directory Federation Services Denial of Service Vulnerability (high 7.5)
- [CVE-2026-50410](https://insights.sbomify.com/CVE-2026-50410/): Windows Runtime Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-5041](https://insights.sbomify.com/CVE-2026-5041/): code-projects Chamber of Commerce Membership Management System pageMail.php fwrite command injection (medium 5.1)
- [CVE-2026-50409](https://insights.sbomify.com/CVE-2026-50409/): Windows Overlay Filter Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50408](https://insights.sbomify.com/CVE-2026-50408/): Microsoft Excel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50407](https://insights.sbomify.com/CVE-2026-50407/): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50406](https://insights.sbomify.com/CVE-2026-50406/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50405](https://insights.sbomify.com/CVE-2026-50405/): Windows Filtering Platform Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50404](https://insights.sbomify.com/CVE-2026-50404/): Windows Media Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50403](https://insights.sbomify.com/CVE-2026-50403/): Windows Runtime Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50402](https://insights.sbomify.com/CVE-2026-50402/): NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50401](https://insights.sbomify.com/CVE-2026-50401/): Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50400](https://insights.sbomify.com/CVE-2026-50400/): Windows App Package Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-5040](https://insights.sbomify.com/CVE-2026-5040/): Weak Password Hashing Mechanism in TP-Link Deco M5 (high 7.1)
- [CVE-2026-50399](https://insights.sbomify.com/CVE-2026-50399/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50398](https://insights.sbomify.com/CVE-2026-50398/): Windows Media Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-50397](https://insights.sbomify.com/CVE-2026-50397/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50396](https://insights.sbomify.com/CVE-2026-50396/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50394](https://insights.sbomify.com/CVE-2026-50394/): Windows Media Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50393](https://insights.sbomify.com/CVE-2026-50393/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50392](https://insights.sbomify.com/CVE-2026-50392/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50391](https://insights.sbomify.com/CVE-2026-50391/): Windows Group Policy Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50390](https://insights.sbomify.com/CVE-2026-50390/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-5039](https://insights.sbomify.com/CVE-2026-5039/): Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N (medium 6.1)
- [CVE-2026-50389](https://insights.sbomify.com/CVE-2026-50389/): Windows File Explorer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50388](https://insights.sbomify.com/CVE-2026-50388/): Windows NTFS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-50387](https://insights.sbomify.com/CVE-2026-50387/): Windows GDI Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-50386](https://insights.sbomify.com/CVE-2026-50386/): Windows NTFS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-50385](https://insights.sbomify.com/CVE-2026-50385/): Windows Runtime Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-50384](https://insights.sbomify.com/CVE-2026-50384/): Windows Clip Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-50383](https://insights.sbomify.com/CVE-2026-50383/): Windows Print Spooler Information Disclosure Vulnerability (medium 6.1)
- [CVE-2026-50382](https://insights.sbomify.com/CVE-2026-50382/): DirectX Graphics Kernel Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-50381](https://insights.sbomify.com/CVE-2026-50381/): Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-50380](https://insights.sbomify.com/CVE-2026-50380/): Windows GDI+ Remote Code Execution Vulnerability (critical 9.6)
- [CVE-2026-5038](https://insights.sbomify.com/CVE-2026-5038/): multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/577/