TOCTOU

Windows Push Notification Service Use-After-Free Race (CVE-2026-42978) newCVE-2026-42978binaryHIGH 7.8Unverified2026-07-05PackageKit TOCTOU Local Privilege Escalation (CVE-2026-41651) newCVE-2026-41651binaryHIGHPatched2026-07-05Balena Etcher Windows TOCTOU Privilege Escalation — CVE-2026-30332 newCVE-2026-30332binaryHIGHUnverified2026-07-05ASUS DriverHub Update TOCTOU Local Privilege Escalation — CVE-2026-1880 newCVE-2026-1880binaryMEDIUMPatched2026-07-05Amazon WorkSpaces Skylight Workspace Config Service Local Privilege Escalation (CVE-2026-7791) newCVE-2026-7791cloudHIGHUnverified2026-07-05AI Model-Loader `trust_remote_code` Order-of-Operations RCE Simulation (CVE-2026-22807) newCVE-2026-22807miscHIGHPatched2026-07-05Docker cp Copy-Out Destination Escape via Symlink Race newNone assigned as of 2026-07-03cloudMEDIUMUnverified2026-07-03CVE-2026-50656 RoguePlanet — Safe Vulnerability Checker (Resurface) new EPSS 11%CVE-2026-50656binaryHIGH 7.8Patched2026-06-26RoguePlanet — Windows Defender LPE via ISO Mount + Task Scheduler Race Condition new EPSS 11%CVE-2026-50656binaryHIGH 7.8Unpatched2026-06-10FirefUXSS: Universal XSS in Firefox Focus for iOS via Redirect-Scheme Validation Race Condition new—webCRITICAL 9.3Unpatched2026-06-08RedSun Privileged File Write (CVE-2026-33825) new KEV RWCVE-2026-33825binaryHIGH 7.8Patched2026-05-15