CVE-2025-33057

CVE-2025-33057 is a Windows Local Security Authority (LSA) vulnerability where a null pointer dereference could allow an authorized attacker to cause a network-based Denial-of-Service. Affected component is LSA; impact is DoS over the network. Documented in NVD and corroborated by NC SC/NCSC entr...

CVE-2026-0390

Technical details about CVE-2026-0390 are not publicly provided in the available documents. No information on affected product versions, root cause, exploitability, or remediation is included. Monitor for updates from official sources.

CVE-2026-20922

CVE-2026-20922 is a heap-based buffer overflow in Windows NTFS that enables a locally authenticated attacker to execute code. The description and connected sources confirm NTFS as the vulnerable component and local execution as the impact. Public details in the provided documents are consistent w...

CVE-2026-61928

An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...

CVE-2024-43516

Technical details about CVE-2024-43516 are not provided in the connected documents. Public details appear limited in the supplied sources. Monitor for updates.

CVE-2025-21258

Technical details about CVE-2025-21258 are not publicly provided in the supplied documents. No affected product/version/root cause/exploit or remediation details are present here; please consult Microsoft advisories for updates.

CVE-2025-49691

CVE-2025-49691 is a heap-based buffer overflow in Windows Media that could allow an adjacent-network attacker to execute code. CVSSv3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents indicate this affects Windows Media and has co...

CVE-2025-54918

CVE-2025-54918 describes an improper authentication flaw in Windows NTLM that enables a network-authenticated attacker to elevate privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and privileges required. A PoC exploit exists on GitHub (CVE-2025-54918-...

CVE-2026-50500

CVE-2026-50500 is a Windows Netlogon use-after-free vulnerability allowing an authenticated attacker to elevate privileges over the network. The affected component is Windows Netlogon; impact is elevation of privileges (CVE-2026-50500, CVSS 7.5). Connected sources reference Microsoft advisories a...

CVE-2026-59125

Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...

CVE-2026-62877

CVE-2026-62877 is a Windows Win32K vulnerability described as a stack-based buffer overflow that enables local privilege escalation by an authorized user. The affected component is the Windows Win32K subsystem; the root cause is a stack-based buffer overflow within Win32K code paths. The CVSS vec...

CVE-2024-38235

CVE-2024-38235 is listed under Windows Hyper-V with a CVSS v3.1 score of 6.50 and impact described as a Denial-of-Service. The connected NCSC advisory confirms Windows vulnerabilities fixed in this cycle; it recommends applying the Microsoft updates per MSRC guidance. The provided documents do no...

CVE-2024-43515

CVE-2024-43515 is described in the provided documents as an Internet Small Computer Systems Interface (iSCSI) Denial of Service vulnerability with CVSS v3.1 base score 7.5. The NCSC advisory explicitly lists CVE-2024-43515 under Windows iSCSI as a 7.50 Denial-of-Service, indicating a DoS impact f...

CVE-2025-29840

CVE-2025-29840 is a Windows component issue in Windows Media where a stack-based buffer overflow enables remote code execution over the network (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; CVSSv3.1 base 8.8). The connected sources indicate this is tracked as a Windows Media vulnerability with high sever...

CVE-2025-29959

Technical details about CVE-2025-29959 are not publicly available in the provided connected documents. The initial description notes a RRAS uninitialized resource issue, but no product/version/root-cause/fix specifics are present here; monitor official advisories for updates.

CVE-2025-32724

CVE-2025-32724 affects Windows Local Security Authority Subsystem Service (LSASS). The connected NC SC advisory and MS security-update artifacts identify this as a Denial-of-Service vulnerability with CVSS v3.1 base score 7.5 (NETWORK, LOW complexity, NONE privileges, NONE user interaction) and s...

CVE-2025-33062

CVE-2025-33062 affects the Windows Storage Management Provider and is characterized as an out-of-bounds read that can allow an attacker with local access to disclose information. The NVD entry notes a CVSS v3.1 base score of 5.5 (Local, Low exploit complexity, Privileges Required: Low, Confidenti...

CVE-2025-47973

Technical details about CVE-2025-47973 are not publicly disclosed in the provided documents. No affected products, root cause, or remediation are described here. Monitor for updates from the sources.

CVE-2026-42900

The CVE-2026-42900 entry concerns a race condition caused by improper synchronization in the Windows App Store. Reported impact is privilege elevation over a network, implying an unauthorized attacker could exploit a timing-related flaw to escalate access. Documents consistently describe a concur...

CVE-2026-62698

The CVE-2026-62698 entry concerns a numeric truncation error in Microsoft Digest Authentication. The vulnerability is described as enabling a locally authenticated attacker to achieve privilege elevation (base score 7.8, CVSS 3.1, LOCAL, LOW privileges required, NONE user interaction, HIGH impact...

CVE-2026-70330

CVE-2026-70330 is a heap-based buffer overflow in the Windows DNS service that allows an authorized attacker to elevate privileges locally . NVD assigns a CVSS 3.1 score of 7.8 (HIGH) with low privileges required, while Microsoft's CNA score is 6.7 (MEDIUM) requiring high privileges. CISA SSVC as...

CVE-2024-43458

Technical details about CVE-2024-43458 are not publicly provided in the connected documents. Monitor for updates in these sources for affected products,Impact and remediation information.

CVE-2025-21249

Technical details for CVE-2025-21249 are not publicly available in the provided documents; no affected products, root cause, or remediation are stated here. Monitor for official updates from Microsoft and CVE databases.

CVE-2025-21350

CVE-2025-21350 is a Windows Kerberos Denial-of-Service vulnerability. Connected sources indicate the issue affects Windows Kerberos with a CVSSv3.1 base score of 5.9 (Network, High impact on availability; no confidentiality/integrity impact). The connected documents confirm Microsoft has released...

CVE-2025-32718

CVE-2025-32718 : Integer overflow or wraparound in Windows SMB enables a locally authenticated attacker to elevate privileges. Connected sources confirm impact as local privilege escalation on Windows SMB, with CVSS v3.1 base score 7.8 (HIGH) and local attack vector. Public references in NVD/NCSC...

CVE-2026-62894

CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...

CVE-2023-35329

Technical details about CVE-2023-35329 (affected product, vulnerable component, impact, exploitability, or fix) are not publicly provided in the connected documents. Monitor for updates to disclose concrete specifics.

CVE-2024-38247

CVE-2024-38247 is a Windows Graphics Component local elevation of privilege vulnerability. The CVSSv3.1 vector shows Attack Vector: Local, Privileges Required: Low, User Interaction: None, with all of Confidentiality/Integrity/Availability impacts: High. Public documents confirm a Windows patch r...

CVE-2025-29833

Technical details for CVE-2025-29833 are not provided in the connected documents. The EUVD and MSKB entries cover other issues and updates, but none specify affected product/version, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2025-33055

CVE-2025-33055 is an information-disclosure vulnerability: an out-of-bounds read in Windows Storage Management Provider could allow an authorized, local attacker to disclose information. Connected sources confirm the flaw and impact but do not provide concrete exploit details or a documented reme...

CVE-2025-33058

CVE-2025-33058 describes an out-of-bounds read in the Windows Storage Management Provider, enabling a locally authorized attacker to disclose information. Affected product/component: Windows Storage Management Provider. Root cause: memory read beyond bounds leading to information disclosure (conf...

CVE-2026-34329

CVE-2026-34329 is a heap-based buffer overflow in Windows Message Queuing (MSMQ) that could allow an unauthenticated attacker to execute code over an adjacent network. Public details in provided connected documents describe MSMQ as affected and classify the vulnerability as remote code execution;...

CVE-2026-34342

CVE-2026-34342 describes a race condition in Windows Print Spooler Components enabling local privilege escalation for an authenticated attacker. The vulnerability arises from improper synchronization on a shared resource, leading to concurrent execution issues. Impact is local elevation of privil...

CVE-2026-50667

CVE-2026-50667 is a Windows NTFS/Windows Common Log File System Driver elevation-of-privilege vulnerability caused by a race condition in a shared resource. The CVE affects Windows NTFS and is identified by Microsoft as a privilege-escalation issue; updates have been released (July 2026 monthly r...

CVE-2026-62757

Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...

CVE-2026-62785

CVE-2026-62785: Heap-based buffer overflow in Windows LDAP (Lightweight Directory Access Protocol) allows unauthenticated remote code execution over the network. Affected: Windows LDAP service. Root cause: improper heap handling leading to overflow. Impact: remote code execution with high severit...

CVE-2024-38234

CVE-2024-38234 is a Windows Network Virtualization vulnerability rated CVSS v3.1 base score 6.5 (Medium) with Adjacent attack vector, Low attack complexity, No privileges, No user interaction, and a High availability impact (Denial of Service). The connected documents confirm the CVE-ID and its D...

CVE-2024-38252

Technical details about CVE-2024-38252 are not publicly provided in the supplied documents. The records reference a Windows kernel privilege-elevation issue but do not disclose affected components, root cause, or fixes. Monitor for updates.

CVE-2024-43547

CVE-2024-43547 is listed in the Windows Kerberos category as a Windows Kerberos Information Disclosure vulnerability with impact described as Access to sensitive data. The connected documents identify the CVE and its general risk context but do not provide concrete details on affected product ver...

CVE-2025-21389

Technical details about CVE-2025-21389 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE repositories for affected products, exploitability, and remediation.

CVE-2025-29829

Technical details about CVE-2025-29829 are not provided in the supplied documents. Monitor official updates from Microsoft/NVD for affected products, impact, and mitigations.

CVE-2025-29954

Technical details for CVE-2025-29954 are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (MSRC) and vulnerability feeds as the connected sources are not detailed here.

CVE-2025-29962

Technical details about CVE-2025-29962 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-49734

CVE-2025-49734 affects Windows PowerShell. The root cause is an improper restriction of the communication channel to intended endpoints, enabling an authorized local attacker to elevate privileges. The CVE maps to a local privilege escalation with high impact (C:H/I:H/A:H) and requires local acce...

CVE-2025-55230

CVE-2025-55230 is a local privilege-escalation in the Windows MBT Transport driver (netbt.sys) caused by an untrusted pointer dereference when handling a specific IOCTL. An authenticated local user can elevate to SYSTEM by dereferencing a kernel address via kernel memory access. A PoC exploit exi...

CVE-2026-54113

The CVE-2026-54113 entry pertains to resource allocation without limits or throttling in the Windows Kernel accessible over a network, enabling a remote attacker to cause a denial of service. Documents indicate the affected component is the Windows Kernel involved in network-resource handling; ro...

CVE-2023-33172

Technical details about CVE-2023-33172 are not publicly provided in the supplied documents; no affected products, versions, impact, or mitigations are specified. Monitor for updates.

CVE-2025-33066

CVE-2025-33066 is associated with Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2025-33066 under RRAS with an impact of “Execute Random Code” and a network-exploitable vector, indicating a heap-based buffer overflow that could allow remote code execution....

CVE-2025-59295

CVE-2025-59295 is a heap-based buffer overflow in Internet Explorer that could allow an unauthenticated attacker to execute code remotely over the network (CVSS 3.1/8.8). The connected MSKB guidance and advisories indicate Windows security updates addressing this class of issue; apply the latest ...

CVE-2026-24291

CVE-2026-24291 affects Windows Accessibility Infrastructure (ATBroker.exe). It is an Elevation of Privilege vulnerability with local attack vector, require low privileges and no user interaction, and it impacts confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remed...