kernel vulnerability

CVE-2026-49808 is a Windows Kernel elevation-of-privilege vulnerability fixed in Microsoft’s July 14, 2026 security updates for Windows 11 and Windows Server 2025. Administrators should deploy the applicable cumulative update rather than treating the flaw’s “Exploitation Less Likely” assessment...

CVE-2026-50294 exposes sensitive Windows kernel information to a local attacker and is fixed by Microsoft’s July 14, 2026 security updates. The flaw affects Windows 11 24H2, 25H2 and 26H1, multiple Windows 10 editions, and supported or extended-support Windows Server releases dating back to...

CVE-2026-49798 is a newly patched Windows Kernel use-after-free vulnerability that can let a local attacker gain elevated privileges without already holding a privileged account. Microsoft released the fix on July 14, 2026, across supported Windows client and server editions, assigning the flaw...

CVE-2026-49795, a newly patched Windows Kernel elevation-of-privilege vulnerability, allows a local attacker with an existing low-privilege account to exploit a use-after-free condition and cross a Windows security boundary. Microsoft rates the flaw Important, but its CVSS 3.1 base score of 8.8...

CVE-2026-58614 is a Windows Kernel security-feature bypass caused by an out-of-bounds read, and Microsoft has patched it across supported Windows 10, Windows 11, and Windows Server releases in the July 14, 2026 security updates. The flaw requires an authorized attacker to operate locally, but...

Microsoft has patched CVE-2026-54132, a Windows Kernel heap-based buffer overflow that could let an attacker with physical access elevate privileges on affected Windows 10, Windows 11, and Windows Server systems. The vulnerability carries Microsoft’s “Important” rating and a CVSS 3.1 base score...

Microsoft’s July 14, 2026 security updates address CVE-2026-49173, an Important-rated Windows Kernel elevation-of-privilege vulnerability that could allow an attacker who already has local access to gain greater control over a Windows machine. The flaw carries a CVSS score of 7.8, but Microsoft...

CVE-2026-46152 is a Linux kernel Wi-Fi vulnerability published by NVD on May 28, 2026, affecting mac80211 fast-RX handling, where a mistakenly static per-call result variable could be shared by concurrent receive paths and misroute mesh packets. The patch is almost comically small: delete one...

CVE-2026-46186 is a newly published Linux kernel vulnerability, disclosed by kernel.org and listed by NVD on May 28, 2026, in the Bluetooth virtio_bt driver’s receive path, where malformed backend-supplied packets can reach core Bluetooth handling without minimum header-length validation. It is...

CVE-2026-46101 is a newly published Linux kernel vulnerability, recorded by NVD on May 27, 2026, in which malformed nftables bitwise shift rules could trigger undefined behavior in netfilter’s nft_bitwise packet-processing path. The fix is tiny, but the lesson is not. A three-line validation...

CVE-2026-43305 is a newly published Linux kernel vulnerability, disclosed through kernel.org and surfaced in Microsoft’s Security Update Guide on May 8, 2026, that fixes an AMD display-driver bug capable of hanging affected systems during a fast display update path. That plain sentence is the...

CVE-2026-31591: Linux KVM SEV-SNP vCPU Locking Flaw Can Corrupt Guest State or Crash the Host CVE-2026-31591 is a Linux kernel vulnerability in KVM’s AMD SEV-SNP launch path. The issue affects the way KVM synchronizes Virtual Machine Save Areas, or VMSAs, when finalizing the launch of an SEV-SNP...

Microsoft has recorded CVE-2026-25179 as a newly disclosed elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock (AFD.sys), and system owners should treat it as an Important local privilege escalation that requires immediate inventorying and patching across...

Microsoft today confirmed a high‑severity elevation‑of‑privilege flaw in the Windows Ancillary Function Driver for WinSock (AFD.sys) tracked as CVE‑2026‑25176, a kernel‑level improper access control defect that — if left unpatched — allows a locally authorized, low‑privileged user to elevate to...

Microsoft’s security catalog lists CVE-2026-25175 as a newly recorded elevation-of-privilege vulnerability in the Windows NTFS file system: an out-of-bounds read in the NTFS driver that, when triggered by a local, low-privileged account, can be converted into a SYSTEM-level compromise...

Microsoft has published details for CVE-2026-25167, a use‑after‑free elevation‑of‑privilege flaw in the Microsoft Brokering File System (BFS) that can allow a locally‑accessible attacker to escalate to SYSTEM‑level privileges on unpatched machines; Microsoft lists the vulnerability in the March...

Microsoft’s March Patch Tuesday added another Windows kernel elevation-of-privilege entry to the list: CVE-2026-24289, an Important-rated Windows Kernel vulnerability that Microsoft patched as part of the March 10, 2026 security updates. This is one of dozens of elevation-of-privilege (EoP)...

Microsoft’s public tracking entry for CVE‑2026‑24283 identifies a new elevation‑of‑privilege weakness in the Windows Multiple UNC Provider kernel component that Microsoft classifies as a kernel‑mode, local attack path — and the vendor’s published confidence signal must be treated as the...

Microsoft has published an advisory for CVE-2026-23671: a kernel‑level race condition in the Windows Bluetooth RFCOM Protocol Driver that can be abused by a locally authenticated, low‑privilege user to escalate to SYSTEM — and Microsoft’s update guidance indicates fixes were released on March...

A logic error in the Android kernel’s mem_protect.c functions can let a local, unprivileged process cause arbitrary code execution in kernel context — giving an attacker a direct elevation to system privileges without any user interaction or extra execution rights. (nvd.nist.gov) Background /...