CVE-2026-42825

CVE-2026-42825 describes a use-after-free in Windows Telephony Service that allows an authorized attacker to elevate privileges locally. The description clearly states local privilege escalation as the impact, but the connected documents do not provide specifics on affected product versions, root...

CVE-2026-42825 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-32170 Windows Rich Text Edit Elevation of Privilege Vulnerability

...

CVE-2026-32170

Technical details for CVE-2026-32170 are not publicly available in the provided documents beyond the basic description. No vendor, product, version, root cause, impact, or fix specifics are supplied here. Monitor official disclosures and CVE/Microsoft update guidance for updates.

CVE-2026-32170 Windows Rich Text Edit Elevation of Privilege Vulnerability

...

CVE-2026-41095 Data Deduplication Elevation of Privilege Vulnerability

...

CVE-2026-41095

This CVE is a local privilege escalation caused by a use-after-free in Windows Data Deduplication. The description identifies a vulnerability that an authorized attacker could exploit locally to gain higher privileges. The connected sources document the flaw in the Data Deduplication component an...

CVE-2026-41095 Data Deduplication Elevation of Privilege Vulnerability

...

CVE-2026-41088 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-41088

CVE-2026-41088 affects Windows: External control of file name or path in the Windows Ancillary Function Driver for WinSock can allow an authorized local user to elevate privileges. The available connected records corroborate the issue description (Windows WinSock driver path/name control enabling...

CVE-2026-41088

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-41088 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-40419

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2026-40419 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

...

CVE-2026-40419 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

...

CVE-2026-40419

CVE-2026-40419 : A use-after-free vulnerability in Microsoft Office (Click-To-Run) could allow an authorized local attacker to achieve elevation of privilege. The underlying cause is a use-after-free issue in Office components, leading to local privilege escalation. Documented impact is local, wi...

CVE-2026-40417 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

...

CVE-2026-40417 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

...

CVE-2026-40417

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-40410

Technical details (affected component, root cause, affected versions, exploit vectors or fixes) are not publicly provided in the supplied documents; monitor for updates from official advisories.