The vulnerability of the Windows Search search and indexing service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Search search and indexing service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-50679

CVE-2026-50679 is a Windows-focused elevation-of-privileges vulnerability in the Windows Search Component. The core issue is a heap-based buffer overflow that can be triggered by an authenticated local attacker to gain higher privileges on the system. Public descriptions consistently name the aff...

CVE-2026-50679 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-50679 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-50373 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-50373

CVE-2026-50373 affects the Microsoft Windows Search Component (Windows Search Service). It enables local elevation of privileges via improper access control. Microsoft has released updates (e.g., KB5101650 and MSRC guidance) to address the vulnerability; apply the available security updates to mi...

Windows Search Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-27909 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-27909 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-27909

CVE-2026-27909 is a Windows Search Component elevation-of-privilege vulnerability (use-after-free) that could allow an authenticated local attacker to gain SYSTEM privileges. Connected advisories confirm the issue and indicate Microsoft has fixed vulnerabilities across Windows components in April...

Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

The vulnerability of the Windows operating system’s Search Service allows a perpetrator to trigger a service failure.

The vulnerability of the Windows operating system’s Search Service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-59253 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59253

CVE-2025-59253 is documented with concrete details in connected sources: a local-privilege/reliance on an access-control flaw in the Windows Search Component that can enable a denial-of-service by an authorized attacker. The CVE is linked to Microsoft/security guidance entries and EUVD-2025-34274...

CVE-2025-59253 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59198 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59198

CVE-2025-59198 is a Microsoft Windows vulnerability in the Windows Search Component caused by improper input validation that can allow an authorized, local attacker to cause a denial of service. The CVE is shown in the Windows Search Component entries with a base CVSS v3.1 score of 5.0 (MEDIUM), ...

CVE-2025-59198 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59190 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59190

CVE-2025-59190 affects the Microsoft Windows Search Component. It is due to improper input validation and allows a local attacker to cause a Denial of Service. The CVE is rated with CVSS 3.1 (base 5.5, MEDIUM); attack vector LOCAL, privileges REQUIRED NONE, user interaction REQUIRED, and impact l...