CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2026-50377

CVE-2026-50377 is a Windows Kernel elevation-of-privilege vulnerability described as an out-of-bounds read that enables an authorized local attacker to gain higher privileges. The connected materials consistently identify the Windows Kernel as the affected component and state the root cause as a ...

CVE-2026-50377 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-50330 Windows Remote Desktop Client Elevation of Privilege Vulnerability

...

CVE-2026-50312

CVE-2026-50312 is a Windows Ancillary Function Driver for WinSock use-after-free vulnerability that enables local privilege escalation when exploited. The initial description and connected sources confirm the affected component and root cause, and indicate the impact is elevation of privileges fo...

CVE-2026-50330

CVE-2026-50330 is a Windows Remote Desktop Client vulnerability described as a heap-based buffer overflow that allows an unauthenticated attacker to escalate privileges over the network. The CVE appears in multiple sources (NVD, EUVD, CIRCL) with consistent language about privilege elevation via ...

CVE-2026-50330 Windows Remote Desktop Client Elevation of Privilege Vulnerability

...

CVE-2026-50312 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-50312 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-50315 Windows Image Acquisition Elevation of Privilege Vulnerability

...

CVE-2026-50315 Windows Image Acquisition Elevation of Privilege Vulnerability

...

CVE-2026-50315

CVE-2026-50315 is a Windows Image Acquisition vulnerability described as a null pointer dereference that allows an authorized, local attacker to achieve privilege escalation. The entry notes a CVSSv3.1 base score of 7.8 (High), with local attack vector, low attack complexity, required privileges,...

CVE-2026-50425

CVE-2026-50425: A use-after-free in Windows Internal System User Profile leads to local privilege escalation for an authorized attacker. Affected component: Windows Internal System User Profile; root cause: use-after-free; impact: gain high privileges locally with no user interaction (CVSSv3.1: A...

CVE-2026-50425 Windows Internal System User Profile Elevation of Privilege Vulnerability

...

CVE-2026-50321

CVE-2026-50321 is a Windows USB Driver elevation-of-privilege vulnerability (race condition on a shared resource). An authorized, local attacker could exploit this to gain higher privileges on the affected system, per the NVD entry and cross-referenced sources. Connected advisories corroborate th...

CVE-2026-50321 Windows USB Driver Elevation of Privilege Vulnerability

...

CVE-2026-50321 Windows USB Driver Elevation of Privilege Vulnerability

...

CVE-2026-50396 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability

...

CVE-2026-50343

CVE-2026-50343, a Microsoft Install Service Elevation of Privilege vulnerability, arises from improper privilege management. An authorized local attacker could elevate privileges on affected Windows systems. The vulnerability is listed among several critical Windows privilege-escalation issues di...