Medium-severity CVEs (page 38)
Page 38 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-50684 | Medium | 4.8 | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attac… |
CVE-2026-50681 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
CVE-2026-50668 | Medium | 6.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-50661 | Medium | 6.1 | 2026-07-14 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
CVE-2026-50657 | Medium | 4.7 | 2026-07-14 | Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally. |
CVE-2026-50504 | Medium | 6.5 | 2026-07-14 | Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50497 | Medium | 6.5 | 2026-07-14 | Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50495 | Medium | 6.1 | 2026-07-14 | Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
CVE-2026-50492 | Medium | 6.8 | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-50485 | Medium | 4.5 | 2026-07-14 | Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-50483 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally. |
CVE-2026-50475 | Medium | 5.5 | 2026-07-14 | Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-50473 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-50468 | Medium | 6.5 | 2026-07-14 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-50456 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-50455 | Medium | 5.5 | 2026-07-14 | Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. |
CVE-2026-50453 | Medium | 6.1 | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-50445 | Medium | 6.5 | 2026-07-14 | Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50442 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-50437 | Medium | 5.5 | 2026-07-14 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
CVE-2026-50434 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-50432 | Medium | 5.3 | 2026-07-14 | Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. |
CVE-2026-50431 | Medium | 5.5 | 2026-07-14 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability |
CVE-2026-50430 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-50426 | Medium | 6.8 | 2026-07-14 | Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network. |
CVE-2026-50420 | Medium | 6.2 | 2026-07-14 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally. |
CVE-2026-50418 | Medium | 5.1 | 2026-07-14 | Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-50415 | Medium | 5.3 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50409 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
CVE-2026-50408 | Medium | 5.5 | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-50401 | Medium | 5.5 | 2026-07-14 | Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. |
CVE-2026-50394 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. |
CVE-2026-50389 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-50383 | Medium | 6.1 | 2026-07-14 | Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
CVE-2026-50377 | Medium | 5.5 | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50376 | Medium | 6.5 | 2026-07-14 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50375 | Medium | 6.3 | 2026-07-14 | Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2026-50374 | Medium | 6.3 | 2026-07-14 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack. |
CVE-2026-50366 | Medium | 6.5 | 2026-07-14 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
CVE-2026-50352 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
CVE-2026-50341 | Medium | 5.5 | 2026-07-14 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-50339 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-50334 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally. |
CVE-2026-50324 | Medium | 5.9 | 2026-07-14 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a n… |
CVE-2026-50312 | Medium | 4.7 | 2026-07-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-50310 | Medium | 4.7 | 2026-07-14 | Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally. |
CVE-2026-50302 | Medium | 4.2 | 2026-07-14 | Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-4018 | Medium | 6.4 | 2026-07-14 | TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE abili… |
CVE-2026-49177 | Medium | 5.5 | 2026-07-14 | Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally. |
CVE-2026-48580 | Medium | 5.5 | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-47969 | Medium | 5.5 | 2026-07-14 | Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to… |
CVE-2026-45066 | Medium | 6.1 | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, HtmlSaniti… |
CVE-2026-45065 | Medium | 6.1 | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, UrlGenerator val… |
CVE-2026-15715 | Medium | 4.3 | 2026-07-14 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2026-0515 | Medium | 6.2 | 2026-07-14 | Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel. |
CVE-2026-59888 | Medium | 6.5 | 2026-07-14 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4… |
CVE-2026-58614 | Medium | 5.5 | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally. |
CVE-2026-58279 | Medium | 6.5 | 2026-07-14 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. |
CVE-2026-57979 | Medium | 6.5 | 2026-07-14 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-57976 | Medium | 6.5 | 2026-07-14 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
CVE-2026-57097 | Medium | 6.4 | 2026-07-14 | Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack. |
CVE-2026-56185 | Medium | 6.5 | 2026-07-14 | Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network. |
CVE-2026-56164 | Medium | 5.3 | 2026-07-14 | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-55003 | Medium | 6.5 | 2026-07-14 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-55000 | Medium | 6.4 | 2026-07-14 | Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-54997 | Medium | 5.5 | 2026-07-14 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
CVE-2026-54988 | Medium | 6.1 | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-54432 | Medium | 4.7 | 2026-07-14 | Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS). The issue occurs because the attachment MIME type is not prope… |
CVE-2026-54132 | Medium | 6.8 | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-54108 | Medium | 6.5 | 2026-07-14 | External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-50678 | Medium | 6.6 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-50381 | Medium | 5.5 | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information local… |
CVE-2026-50350 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information lo… |
CVE-2026-50316 | Medium | 5.5 | 2026-07-14 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-50303 | Medium | 5.5 | 2026-07-14 | Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally. |
CVE-2026-50300 | Medium | 5.5 | 2026-07-14 | Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-50299 | Medium | 6.8 | 2026-07-14 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-50298 | Medium | 6.8 | 2026-07-14 | Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-50295 | Medium | 5.5 | 2026-07-14 | Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally. |
CVE-2026-50294 | Medium | 6.2 | 2026-07-14 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally. |
CVE-2026-49807 | Medium | 6.2 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally. |
CVE-2026-49804 | Medium | 6.6 | 2026-07-14 | Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-49801 | Medium | 5.5 | 2026-07-14 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
CVE-2026-49799 | Medium | 6.5 | 2026-07-14 | Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
CVE-2026-49794 | Medium | 4.6 | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-49180 | Medium | 5.5 | 2026-07-14 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information loca… |
CVE-2026-49174 | Medium | 6.1 | 2026-07-14 | Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
CVE-2026-49168 | Medium | 6.8 | 2026-07-14 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-49167 | Medium | 4.7 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-47282 | Medium | 6.5 | 2026-07-14 | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
CVE-2026-45496 | Medium | 5.5 | 2026-07-14 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security featu… |
CVE-2026-44806 | Medium | 5.3 | 2026-07-14 | Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network. |
CVE-2026-41087 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-40422 | Medium | 5.5 | 2026-07-14 | Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-36214 | Medium | 6.4 | 2026-07-14 | osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insuff… |
CVE-2026-34349 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. |
CVE-2026-34348 | Medium | 6.5 | 2026-07-14 | Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network. |
CVE-2026-34346 | Medium | 5.5 | 2026-07-14 | Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. |
CVE-2026-34328 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally. |
CVE-2026-33842 | Medium | 5.5 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |