CVE-2025-54112

CVE-2025-54112 is a local privilege escalation in the Microsoft Virtual Hard Drive caused by a use-after-free, enabling an authenticated attacker to obtain higher privileges on affected Windows systems. The connected sources (including the NCSC advisory and the CVE table for Windows Hyper-V) cate...

CVE-2025-59185

CVE-2025-59185 affects Windows Core Shell, enabling spoofing via external control of a file name or path over a network. The connected documents provide general Windows security updates but do not specify a patch or remediation tied to this CVE; no explicit exploitation details are given in the s...

CVE-2025-59190

CVE-2025-59190 affects the Microsoft Windows Search Component. It is due to improper input validation and allows a local attacker to cause a Denial of Service. The CVE is rated with CVSS 3.1 (base 5.5, MEDIUM); attack vector LOCAL, privileges REQUIRED NONE, user interaction REQUIRED, and impact l...

CVE-2025-50158

CVE-2025-50158 is a TOCTOU race condition in Windows NTFS that could allow a local attacker to disclose information. The description confirms the vulnerability is a local information-disclosure flaw affecting NTFS. Connected sources list CVE-2025-50158 under Windows NTFS with an impact of Access ...

CVE-2025-50177

CVE-2025-50177 affects Windows Message Queuing (MSMQ) with a use-after-free in the MSMQ path that enables remote code execution over a network. Affected: Windows MSMQ component. Impact per CVSS: high (8.1) with network access, no user interaction required. Exploitation as of the connected documen...

CVE-2025-58717

Technical details (affected product/component/version/root cause/mitigation) for CVE-2025-58717 are not disclosed in the provided connected documents. Monitor official advisories (e.g., MSRC/KB updates) for remediation and version-specific guidance.

CVE-2025-49660

Technical details about CVE-2025-49660 (affected product/component/version, root cause, impact, exploit status, or available patch) are not provided in the connected documents; monitor official disclosures for updates.

CVE-2025-53801

CVE-2025-53801 is a Windows DWM core library elevation-of-privilege vulnerability described as an untrusted pointer dereference that enables a locally authenticated attacker to achieve elevation of privileges . The CVE is associated with a CVSS v3.1 base score of 7.8 (HIGH) with local attack vect...

CVE-2025-55335

CVE-2025-55335 : A use-after-free in Windows NTFS leading to potential local privilege escalation. The initial entry notes local privileged impact but provides no concrete patch/version or workaround. Connected MSKBs describe OS update releases addressing various issues (KB5066793, KB5066835/7/ e...

CVE-2025-59196

CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...

CVE-2025-54111

CVE-2025-54111 is documented in the connected materials with concrete details: it involves a use-after-free in Windows UI XAML Phone DatePickerFlyout that can allow an attacker to elevate privileges locally. The NCSC-2025-0277 listing assigns a high severity (CVSS ~7.8–7.8 range) to CVE-2025-5411...

CVE-2025-59201

CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835–KB50668...

CVE-2025-59244

CVE-2025-59244 affects Windows Core Shell and enables spoofing via external control of a file name or path over a network. It has a CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). The vulnerability is listed under Windows Core Shell in the connected KB documents, and Microsoft ...

CVE-2025-53147

CVE-2025-53147 refers to a local privilege escalation in the Windows Ancillary Function Driver for WinSock caused by a use-after-free condition. The CVSS vector indicates a local, high-privilege impact with “LOW” privileges required and no user interaction, consistent with an attacker who already...

CVE-2025-53768

CVE-2025-53768 corresponds to an Xbox-related vulnerability in the IStorageService component, described as a use-after-free that enables an authorized attacker to elevate privileges locally. The connected NCSC advisory references this CVE as an Xbox issue with impact class “Obtaining Increased Ri...

CVE-2025-54094

CVE-2025-54094 is a local privilege escalation in the Windows Defender Firewall Service caused by a type confusion vulnerability. The connected documents confirm the affected component as Windows Defender Firewall Service and the impact as obtaining elevated privileges on the local machine. The s...

CVE-2025-55678

CVE-2025-55678 : A use-after-free in Windows DirectX enables an authenticated local attacker to achieve elevated privileges. The connected EUVD entry confirms this description. No concrete affected builds, exploit details, or patch/version information are provided in the supplied documents. Remed...

CVE-2025-58736

CVE-2025-58736 is a use-after-free in Windows Inbox COM Objects that enables local code execution by an attacker who can interact with the affected system. CVSS v3.1: AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H; Privileges: None, User Interaction: Required, with high impact on confidentiality/ integrity/...

CVE-2025-59197

CVE-2025-59197 is a Windows ETL Channel vulnerability with a concrete technical detail: it arises from insertion of sensitive information into a log file, enabling an authorized attacker to disclose information locally. The connected documentation confirms this CVE is tied to the Windows ETL Chan...

CVE-2025-53140

CVE-2025-53140 is a Windows Kernel Transaction Manager use-after-free vulnerability that could allow a locally authenticated attacker to elevate privileges. It affects the Kernel Transaction Manager component of Windows; root cause is a use-after-free flaw enabling local privilege escalation. The...

CVE-2025-53141

CVE-2025-53141 refers to a null pointer dereference in the Windows Ancillary Function Driver for WinSock that can enable local privilege escalation for an authenticated user. The connected Windows-ecosystem data identifies this CVE as affecting the WinSock ancillary driver with a high base severi...

CVE-2025-54098

Technical details about CVE-2025-54098 (Hyper-V local privilege elevation) are not provided in the connected documents. Monitor for future updates from Microsoft for affected products, impact, and mitigations.

CVE-2025-55701

Technical details for CVE-2025-55701 (affected product/component/versions, root cause, exploit information, or remediation) are not publicly provided in the connected documents; monitor for updates from official sources.

CVE-2025-59200

CVE-2025-59200 describes a race-condition vulnerability in the Data Sharing Service Client where concurrent access to a shared resource allows an unauthorized local attacker to spoof locally. The CVE entry states a base CVSS v3.1 score of 7.7 ( HIGH ), with LOCAL attack vector, LOW confidentialit...

CVE-2025-59214

CVE-2025-59214 is a Microsoft Windows File Explorer spoofing and information-disclosure vulnerability. Public advisories describe exposure of sensitive information to unauthorized actors, enabling spoofing over a network via Windows File Explorer. Multiple connected sources confirm that Windows F...

CVE-2025-50155

CVE-2025-50155 corresponds to a local privilege-escalation vulnerability in Windows Push Notifications. Affected component: Windows Push Notifications service. Root cause: access of a resource using an incompatible type (type confusion). Impact: authorized attacker on the same device can escalate...

CVE-2025-54091

Technical details for CVE-2025-54091 are not publicly provided in the connected documents. The initial description notes a local privilege elevation via Hyper-V, but no specific root cause, affected products, or fixes are given here. Monitor for updates.

CVE-2025-58738

CVE-2025-58738 is a local-execution vulnerability caused by a use-after-free in Inbox COM Objects. Reported impact: unauthorized code execution on the affected system with local attacker access. Documented impact aligns with high-severity CVSS metrics (AV: Local, AC: High, PR: None, UI: Required;...

CVE-2025-58730

The CVE-2025-58730 entry is corroborated by connected sources as a local code-execution via a use-after-free in Inbox COM Objects. The KB/MSKB documents listed do not provide vendor/version specifics or a public fix; public details in EUVD-2025-34313/ NCSC-2025-0310 reiterate the issue abstractly...

CVE-2025-50159

CVE-2025-50159 : Use-after-free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS can enable an authorized local user to escalate privileges. CVSS v3.1 base score 7.3 (LOCAL, LOW complexity, LOW privileges, USER interaction required; confidentiality/integrity/availability High). Affected com...

CVE-2025-50166

CVE-2025-50166 affects Windows Distributed Transaction Coordinator (MSDTC). The issue is an integer overflow/wraparound in MSDTC that can lead to information disclosure over the network when exploited by an attacker with low privileges and no user interaction. The CVSS vector (AV:N/AC:L/PR:L/UI:N...

CVE-2025-50167

CVE-2025-50167 involves a race condition in Windows Hyper-V due to improper synchronization on a shared resource, enabling an authorized local attacker to elevate privileges. The description in the Connected Documents confirms the vulnerability impact as local privilege escalation within Hyper‑V....

CVE-2025-53718

Technical details about CVE-2025-53718 are not publicly available in the provided connected documents. No specific product/version/root-cause/impact details are provided here. Monitor future updates from Microsoft and CVE databases for remediation and impact information.

CVE-2025-54116

CVE-2025-54116 affects Windows MultiPoint Services with Improper access control that enables local privilege escalation by an authorized user. CVSS 3.1 base score 7.3 (Local, Privilege Required Low, User Interaction Required, High Confidentiality/Integrity/Availability impact). The Connected docu...

CVE-2025-55226

Technical details about CVE-2025-55226 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and Vulners for affected products, versions, and fixes once details are published.

CVE-2025-55325

CVE-2025-55325 is a Buffer over-read in the Windows Storage Management Provider that enables an attacker with local access to disclose information. The CVE entry lists a CVSS v3.1 base score of 5.5 (Medium) with local attack vector and low attack complexity; confidentiality impact is High, others...

CVE-2025-55333

CVE-2025-55333 describes an authentication bypass in Windows BitLocker caused by an incomplete factor comparison, enabling a physical attacker to bypass a security feature. The initial entry notes exploitation status as null and does not specify affected product versions beyond Windows BitLocker;...

CVE-2025-59208

CVE-2025-59208 is an out-of-bounds read in Windows MapUrlToZone that could allow an unauthenticated attacker to disclose information over a network. The description and connected documents confirm a network-based exposure affecting Windows, with the root cause being a memory read beyond bounds in...

CVE-2025-53152

CVE-2025-53152 is a local-use-after-free vulnerability in the Desktop Window Manager (DWM) of Windows that enables an authenticated attacker to execute code locally. The CVSS v3.1 score indicates local access with low privileges and no user interaction, but high impact to confidentiality, integri...

CVE-2025-53154

CVE-2025-53154 concerns the Windows Ancillary Function Driver for WinSock and describes a null pointer dereference that enables a local, authorized user to achieve privilege escalation. The CVSSv3.1 metrics cited by Microsoft indicate a local attack vector, low attack complexity, and required pri...

CVE-2025-54895

CVE-2025-54895 : Integer overflow or wraparound in Windows SPNEGO Extended Negotiation can let an authorized, locally authenticated attacker elevate privileges. The connected documents confirm the vulnerability in the Windows SPNEGO Extended Negotiation path and indicate the impact as local privi...

CVE-2025-55692

Technical details for CVE-2025-55692 are not publicly available in the provided documents. Monitor for updates from Microsoft, NVD, and the CVE list.

CVE-2025-58714

CVE-2025-58714 is an elevation-of-privilege issue in the Windows Ancillary Function Driver for WinSock caused by improper access control. The description indicates an authorized attacker could locally elevate privileges. Connected Microsoft advisories (KB/OS update pages) show this CVE among Wind...

CVE-2025-24052

CVE-2025-24052 concerns vulnerabilities in the Agere modem driver (ltmdm64.sys) shipped with Windows. The connected Microsoft KBs confirm that the ltmdm64.sys driver is removed in October 2025 updates, and that fax-modem hardware relying on this driver will no longer function on Windows after the...

CVE-2025-50152

CVE-2025-50152 is a Windows Kernel vulnerability (Out-of-bounds read) that could enable an authorized local attacker to elevate privileges. The initial record lists the CVE with a CVSS v3.1 base score of 7.8 (HIGH) and LOCAL attack vector/low complexity, with no exploitation details. Connected do...

CVE-2025-53134

Technical details about CVE-2025-53134 are not publicly disclosed in the provided Connected documents. Available sources confirm the vulnerability description only (race condition in Windows Ancillary Function Driver for WinSock with local privilege escalation). Monitor for updates.

CVE-2025-53722

CVE-2025-53722 affects Windows Remote Desktop Services. Described as Denial-of-Service via uncontrolled resource consumption, exploitable over the network with no user interaction and no privileges required. CVSS v3.1 base score 7.5 (Network, Low attack complexity, No privileges, No user interact...

CVE-2025-53723

CVE-2025-53723 : Numeric truncation error in Windows Hyper-V allows an authorized, local attacker to elevate privileges. The entry is confirmed to affect the Windows Hyper-V component, with impact described as local privilege escalation and high confidentiality/integrity/availability effects in t...

CVE-2025-53726

CVE-2025-53726 affects Windows Push Notifications and is described as an in-resource access using an incompatible type ('type confusion') that allows an authenticated local attacker to elevate privileges. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and ...

CVE-2025-54894

CVE-2025-54894 is described as Local Security Authority Subsystem Service Elevation of Privilege, but no concrete technical details (affected product/version/root cause) are provided in the connected documents; monitor for updates.