CVE-2026-25187

Improper link resolution before file access 'link following' in Winlogon allows an authorized attacker to elevate privileges locally...

CVE-2026-25187 Winlogon Elevation of Privilege Vulnerability

...

CVE-2026-25187

CVE-2026-25187 is a Winlogon elevation-of-privilege vulnerability described as improper link resolution before file access (link following). It is a local vulnerability in Windows Winlogon that could allow an authorized attacker to elevate privileges to SYSTEM with no user interaction required. T...

CVE-2026-25179 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-25178 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-25179 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-25178

CVE-2026-25178 affects Windows Ancillary Function Driver for WinSock and is classified as a use-after-free that can lead to local elevation of privileges. Public documentation in NVD/CVE and EUVD/NCSC confirms the affected component and privilege escalation impact. Microsoft has released security...

CVE-2026-25178 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-25179

CVE-2026-25179 affects the Windows Ancillary Function Driver for WinSock and is caused by improper validation of a specified input type, enabling a locally authenticated attacker to elevate privileges. The entry carries a CVSS v3.1 base score of 7.0 (High) with Local attack, High confidentiality/...

CVE-2026-25176

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-25177 Active Directory Domain Services Elevation of Privilege Vulnerability

...

CVE-2026-25176

CVE-2026-25176 is a local elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and no user interaction. It impacts confidentiality, integrity, and availability. Exploita...

CVE-2026-25177

CVE-2026-25177 is an elevation-of-privilege vulnerability in Active Directory Domain Services. The CVE affects AD DS and permits an authorized attacker to elevate privileges over the network (CVSS v3.1: 8.8, Network, Privileges Required: Low, User Interaction: None, Confidentiality/Integrity/Avai...

CVE-2026-25176 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-25176 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-25177 Active Directory Domain Services Elevation of Privilege Vulnerability

...

CVE-2026-25175

CVE-2026-25175 is a Windows NTFS elevation of privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required set to LOW. User interaction is NONE and the impact spans Confidentiality, Integrity, and Availability (HIGH/ HIGH...

CVE-2026-25175 Windows NTFS Elevation of Privilege Vulnerability

...

CVE-2026-25175 Windows NTFS Elevation of Privilege Vulnerability

...

CVE-2026-25174

CVE-2026-25174 is a Windows Privilege Elevation vulnerability described as an out-of-bounds read in the Windows Extensible File Allocation feature. The connected NCSC advisory confirms Microsoft has fixed vulnerabilities across Windows components, listing CVE-2026-25174 under Windows Extensible F...