CVE-2026-50679 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-50679

CVE-2026-50679 is a Windows-focused elevation-of-privileges vulnerability in the Windows Search Component. The core issue is a heap-based buffer overflow that can be triggered by an authenticated local attacker to gain higher privileges on the system. Public descriptions consistently name the aff...

CVE-2026-50373

CVE-2026-50373 affects the Microsoft Windows Search Component (Windows Search Service). It enables local elevation of privileges via improper access control. Microsoft has released updates (e.g., KB5101650 and MSRC guidance) to address the vulnerability; apply the available security updates to mi...

CVE-2026-27909 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-27909

CVE-2026-27909 is a Windows Search Component elevation-of-privilege vulnerability (use-after-free) that could allow an authenticated local attacker to gain SYSTEM privileges. Connected advisories confirm the issue and indicate Microsoft has fixed vulnerabilities across Windows components in April...

CVE-2026-27909 Windows Search Service Elevation of Privilege Vulnerability

...

Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2025-59253

CVE-2025-59253 is documented with concrete details in connected sources: a local-privilege/reliance on an access-control flaw in the Windows Search Component that can enable a denial-of-service by an authorized attacker. The CVE is linked to Microsoft/security guidance entries and EUVD-2025-34274...

CVE-2025-59253 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59253 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59198

CVE-2025-59198 is a Microsoft Windows vulnerability in the Windows Search Component caused by improper input validation that can allow an authorized, local attacker to cause a denial of service. The CVE is shown in the Windows Search Component entries with a base CVSS v3.1 score of 5.0 (MEDIUM), ...

CVE-2025-59198 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59198 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59190

CVE-2025-59190 affects the Microsoft Windows Search Component. It is due to improper input validation and allows a local attacker to cause a Denial of Service. The CVE is rated with CVSS 3.1 (base 5.5, MEDIUM); attack vector LOCAL, privileges REQUIRED NONE, user interaction REQUIRED, and impact l...

CVE-2025-59190 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59190 Windows Search Service Denial of Service Vulnerability

...

Windows Search Service Denial of Service Vulnerability

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Microsoft Windows 访问控制错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An access control error vulnerability exists in Microsoft Windows Search Service, which can be exploited by an attacker to cause a denial of service on the system...