CVE-2026-54987

CVE-2026-54987 is a Windows vulnerability described as a heap-based buffer overflow in the Windows Overlay Filter, enabling a locally authenticated attacker to elevate privileges. The CVSSv3.1 score is 7.8 (HIGH) with local attack vector, low attack complexity, and requires low privileges with no...

CVE-2026-54987 Windows Overlay Filter Elevation of Privilege Vulnerability

...

CVE-2026-54989 Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability

...

CVE-2026-54989

CVE-2026-54989 is a use-after-free in the Quality Windows Audio/Video Experience (QWAVE) service that enables a locally authenticated attacker to elevate privileges. The CVSS 3.1 metrics describe a Local attack with High impact on confidentiality, integrity, and availability, requiring LOW privil...

CVE-2026-54129 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2026-54129 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2026-54129

Technical details (affected product/version, root cause, exploit vector, and remediation) are not provided in the supplied documents. Monitor for updates.

CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-49784

Summary: CVE-2026-49784 describes a race condition in the Microsoft Windows App Store caused by concurrent access to a shared resource with improper synchronization. The vulnerability allows an authorized local attacker to elevate privileges. The reported CVSS v3.1 vector is AV:L/AC:H/PR:L/UI:N/S...

CVE-2026-49173 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-49173

CVE-2026-49173 describes a use-after-free in the Windows Kernel that enables a locally authenticated attacker to elevate privileges. The vulnerability is rooted in a memory-management flaw within the kernel; no specific affected Windows versions, patches, or remediation steps are provided in the ...

CVE-2026-49173 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-49175 Windows DNS Client Elevation of Privilege Vulnerability

...

CVE-2026-49175 Windows DNS Client Elevation of Privilege Vulnerability

...

CVE-2026-49175

CVE-2026-49175 is a Windows DNS Client vulnerability described as a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation. The issue affects the Windows DNS client and is characterized by a LOCAL attack vector with low attack complexity and the need f...

CVE-2026-49171 Windows Speech Runtime Elevation of Privilege Vulnerability

...

CVE-2026-49171 Windows Speech Runtime Elevation of Privilege Vulnerability

...

CVE-2026-49171

The CVE-2026-49171 entry describes a Use-After-Free vulnerability in Windows Speech Runtime that enables a locally authenticated attacker to elevate privileges. Affected: Microsoft Windows Speech Runtime components; root cause: use-after-free leading to arbitrary code or privilege escalation (det...

CVE-2026-49176

Summary: CVE-2026-49176 is a Windows WalletService elevation of privilege vulnerability described as improper privilege management that could allow an authorized local attacker to escalate privileges. The available sources (NVD/CVE records) confirm the issue but do not provide concrete details on...