CVE-2026-35416

CVE-2026-35416 describes a local privilege escalation due to a use-after-free in the Windows Ancillary Function Driver for WinSock. The description in the connected documents confirms the vulnerable component and the root cause as a use-after-free, leading to elevation of privileges for an author...

CVE-2026-48575

CVE-2026-48575 describes a protection mechanism failure in Windows Secure Boot that allows an authorized, local attacker to bypass a security feature. The vulnerability enables a local escalation path with high impact on confidentiality and integrity (base score 7.9; AV:L/AC:L/PR:H/UI:N/S:C/C:H/I...

CVE-2026-50391

CVE-2026-50391 is a Microsoft Windows Group Policy privilege-escalation vulnerability. Affects Windows Group Policy functionality; root cause is improper privilege management that permits an authorized local attacker to elevate privileges. CVSS v3.1 base score 7.8 (High) with local, low attack co...

CVE-2026-50426

CVE-2026-50426 : Windows DNS Server contains a relative path traversal vulnerability that could allow an authorized attacker on an adjacent network to execute code. Root cause is traversal of relative paths in DNS Server handling, enabling remote code execution. Reported impact is arbitrary code ...

CVE-2026-50666

CVE-2026-50666 is a Windows Privilege Escalation vulnerability described as a use-after-free in the Windows Remote Access Connection Manager. The issue allows an authorized attacker to elevate privileges over a network. Public sources (NVD/NCSC/NVD-related) corroborate the impact and indicate Mic...

CVE-2026-58614

An out-of-bounds read in the Windows Kernel allows an authorized, local attacker to bypass a security feature. The CVE-2026-58614 entry notes a local vector with Privileges Required: Low and no user interaction, Confidentiality Impact: High, Impact on Availability/Integrity: none, giving a CVSS v...

CVE-2026-62761

CVE-2026-62761 affects Windows DHCP Server. The issue is improper link resolution before file access ("link following"), allowing an authorized attacker to locally elevate privileges. Root cause is in the DHCP Server component; impact is local privilege escalation with high confidentiality/integr...

CVE-2025-48806

Technical details about CVE-2025-48806, including affected products, root cause, and remediation, are not provided in the connected documents. Monitor for official advisories and updates.

CVE-2025-49751

CVE-2025-49751 is a Windows Hyper-V denial-of-service vulnerability caused by missing synchronization. An authenticated, low-privilege attacker on an adjacent network could trigger the condition and deny service. Public details indicate the issue affects Hyper-V; Microsoft released fixes as part ...

CVE-2025-53149

CVE-2025-53149 describes a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that an authorized, locally authenticated attacker could abuse to achieve local privilege elevation. The CVE is tracked with CVSS 3.1: Local, Low attack complexity, Low privileges required, no u...

CVE-2025-54911

CVE-2025-54911 refers to a use-after-free vulnerability in Windows BitLocker that could allow an authorized, locally present attacker to elevate privileges. The CVE entry notes a high-impact scenario with local attack vector, requiring low privileges and user interaction, per the provided CVSS 3....

CVE-2025-54916

CVE-2025-54916 is a Windows NTFS remote code execution vulnerability described as a stack-based overflow in NTFS. Connected sources confirm NTFS is affected and assign a high severity (CVSS ≈ 7.8). Public sources (including Krebs/NCSC) categorize this as an RCE issue for Windows NTFS, with exploi...

CVE-2025-58717

Technical details (affected product/component/version/root cause/mitigation) for CVE-2025-58717 are not disclosed in the provided connected documents. Monitor official advisories (e.g., MSRC/KB updates) for remediation and version-specific guidance.

CVE-2025-59190

CVE-2025-59190 affects the Microsoft Windows Search Component. It is due to improper input validation and allows a local attacker to cause a Denial of Service. The CVE is rated with CVSS 3.1 (base 5.5, MEDIUM); attack vector LOCAL, privileges REQUIRED NONE, user interaction REQUIRED, and impact l...

CVE-2025-60715

Technical details about CVE-2025-60715 (RRAS heap overflow, affected components, fixes) are not provided in the connected documents. Public technical specifics, affected versions, and remediation steps are not disclosed here; monitor for official updates.

CVE-2026-20824

CVE-2026-20824 is a Windows Remote Assistance vulnerability described as a protection mechanism failure that enables a local attacker to circumvent a security measure. It is listed with a local attack vector, requiring user interaction, and a high confidentiality impact. Connected sources identif...

CVE-2026-24297

CVE-2026-24297 : Windows Kerberos contains a race condition in a shared resource that can allow a network-based bypass of a security feature. The vulnerability is listed across multiple sources (NVD, OSV, CIRCL, ENISA EUVD, CVE list) and is associated with Windows Kerberos components. Exploitatio...

CVE-2026-34341

CVE-2026-34341 is a Windows LLDP (Link-Layer Discovery Protocol) vulnerability described as a double free in LLDP that allows an authenticated, local attacker to gain elevated privileges. The connected documents confirm the issue and impact (local privilege escalation) but do not provide concrete...

CVE-2026-42914

Technical details are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2026-45601

CVE-2026-45601 concerns a use-after-free in the Windows Ancillary Function Driver for WinSock, leading to local privilege elevation. The vulnerability is triggered by an authorized attacker and enables local elevation of privileges; the CVSS v3.1 metrics indicate an overall HIGH severity (CVSS:3....

CVE-2026-50448

CVE-2026-50448 – Windows NTFS Heap-based Overflow (Windows NTFS): A local, heap-based buffer overflow in NTFS could allow an authenticated attacker to execute arbitrary code on the affected system. The CVE is documented as a local-execution vulnerability with a Microsoft-provided CVSS v3.1 base s...

CVE-2026-50482

CVE-2026-50482 : Heap-based buffer overflow in Windows NTFS can allow a locally authenticated attacker to execute code. Exploitation requires local access with low privileges and user interaction, per the CVE metrics (AV:L, PR:L, UI:R). Public references indicate Microsoft has released updates to...

CVE-2025-47975

Technical details about CVE-2025-47975 are not publicly provided in the connected documents. The available sources do not describe affected products/versions, root cause specifics, impact beyond the general privilege escalation claim, or fixes. Monitor for updates.

CVE-2025-47985

Technical details (affected component/version, root cause, exploitation) are not provided in the supplied documents. Monitor official advisories for updates and confirmed fixes.

CVE-2025-47986

CVE-2025-47986 : Affected software is the Windows Universal Print Management Service. The vulnerability is a use-after-free in that service, enabling an authorized attacker to achieve local privilege escalation. The CVE has a high impact (8.8/10) with local, privilege-related execution and a chan...

CVE-2025-50153

Technical details about CVE-2025-50153 (affected components, root cause, impact specifics, and fixes) are not provided in the connected documents. Monitor for updates from MSRC/NVD for technical disclosure.

CVE-2025-53144

CVE-2025-53144 is a Windows Message Queuing (MSMQ) remote code execution vulnerability caused by a type confusion flaw in MSMQ. The issue allows an attacker to execute code over the network on a affected Windows host when MSMQ is reachable; CVSSv3.1 indicates AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H w...

CVE-2025-54114

CVE-2025-54114 corresponds to a race condition in the Windows Connected Devices Platform Service caused by concurrent execution sharing a resource. The primary CVE description states it could allow an authorized attacker to elevate privileges locally, while NCSC’s vulnerability table also flags D...

CVE-2025-59277

CVE-2025-59277 involves improper validation of a specified input type in Windows Authentication Methods, enabling a locally authenticated attacker to elevate privileges. Connected MSKBs and EUVD-2025-34369 corroborate the Windows Authentication Methods focus and local privilege escalation risk. T...

CVE-2026-21235

CVE-2026-21235 describes a use-after-free vulnerability in Microsoft Graphics Component that can allow an authorized attacker to elevate privileges locally. Reported CVSS v3.1Base score 7.3 (HIGH) with LOCAL attack vector, low attack complexity, requiring user interaction and low privileges. Impa...

CVE-2026-25188

CVE-2026-25188 is a Windows Telephony Service heap-based buffer overflow that allows an attacker on an adjacent network to elevate privileges. The CVE entry cites an adjacent-network attack vector, low exploit complexity, and no user interaction, with high impact on confidentiality, integrity, an...

CVE-2026-45605

CVE-2026-45605 is a Windows Bluetooth Service use-after-free vulnerability that allows an authorized, locally located attacker to escalate privileges. The CVSS 3.1 base score is 7.8 (High) with local attack vector, low attack complexity, and no user interaction; impact includes confidentiality, i...

CVE-2026-50351

The CVE-2026-50351 issue concerns Windows Audio Compression Manager (ACM). It describes improper access control that could let an authenticated, local attacker elevate privileges on affected Windows systems. Documented impact is local privilege escalation with high severity (CVSS v3.1 base score ...

CVE-2026-50412

CVE-2026-50412 is a Windows NTFS elevation-of-privilege vulnerability caused by a stack-based buffer overflow. The affected component is NTFS in Windows, allowing an authorized local attacker with low privileges and no user interaction to gain SYSTEM-level privileges (base CVSS v3.1: 7.8, Local, ...

CVE-2026-50432

CVE-2026-50432 describes a Use-after-free vulnerability in the Windows Virtual Filtering Platform (VFP) . An authenticated attacker could trigger a denial-of-service condition over the network by exploiting this flaw in the VFP code path, as indicated by the CVE entry: AV:N/AC:H/PR:L/UI:N/S:U/C:N...

CVE-2026-50485

CVE-2026-50485 is a Windows Hyper-V Denial of Service vulnerability caused by a buffer over-read. It can be exploited by an attacker who has adjacent network access to deny service on the target host, with high privileges required and no user interaction. The documented impact is availability los...

CVE-2026-50681

CVE-2026-50681 is a Windows Secure Channel information disclosure vulnerability in Windows Cryptographic Services. The available documents describe exposure of sensitive information to an unauthorized actor, allowing a locally authenticated attacker to disclose data. Connected sources confirm the...

CVE-2026-56648

CVE-2026-56648 is a Windows Network File System (NFS) server vulnerability described as a time-of-check time-of-use (TOCTOU) race condition that could allow an authorized attacker to elevate privileges over the network. Public sources identify the root cause as a TOCTOU race in NFS and classify t...

CVE-2026-58530

CVE-2026-58530 affects Windows Resilient File System (ReFS). The issue is a heap-based buffer overflow in ReFS that allows an unauthorized attacker to execute code locally. The vulnerability has a CVSS v3.1 base score of 7.8 (HIGH), with LOCAL attack vector, no privileges required, and user inter...

CVE-2026-62773

CVE-2026-62773 describes a use-after-free vulnerability in Windows Kerberos that enables a locally authenticated attacker to elevate privileges. The flaw is triggered in the Kerberos subsystem and, when exploited, could allow elevation of rights with high impact on confidentiality, integrity, and...

CVE-2026-62793

CVE-2026-62793 describes a buffer over-read in Windows NTFS that can allow an authorized local attacker to disclose information. Affected component: Windows NTFS filesystem handling. Root cause: memory over-read leading to confidential data exposure (C: HIGH, I: NONE, A: NONE per CVSS 3.1). Explo...

CVE-2025-48808

Technical details about CVE-2025-48808 are not provided in the connected documents. The materials reference Windows security updates generally but do not specify affected kernel components, versions, or fixes. Monitor official advisories for details.

CVE-2025-49680

CVE-2025-49680 affects the Windows Performance Recorder component. Root cause: improper link resolution before file access ("link following"). Impact: local Denial-of-Service by an authenticated user. Public details in connected documents confirm the vulnerability type and affected component, wit...

CVE-2025-62470

CVE-2025-62470 is a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that enables a locally authenticated attacker to escalate privileges. The vulnerability affects the CLFS driver in Windows, with local access required and high impact on confidentiality, integrity, ...

CVE-2026-20919

CVE-2026-20919 is a race-condition vulnerability in Windows SMB Server that allows an authorized network attacker to elevate privileges. The issue concerns concurrent access to a shared resource without proper synchronization. Public documentation in the connected sources confirms Windows SMB Ser...

CVE-2026-41087

CVE-2026-41087 affects Windows File Explorer; a local attacker can cause exposure of sensitive information to obtain disclosure on the host. The vulnerability is rated CVSSv3.1: 5.5 (Medium) with Local access, Low attack complexity, Privileges Required: Low, no user interaction, and Confidentiali...

CVE-2026-41108

CVE-2026-41108 is a heap-based buffer overflow in the Microsoft Windows DNS Client that allows an authorized, local attacker to perform privilege escalation. Affected component: Windows DNS client functionality (DNS resolution path); root cause: heap-based overflow leading to elevation of privile...

CVE-2026-50321

CVE-2026-50321 is a Windows USB Driver elevation-of-privilege vulnerability (race condition on a shared resource). An authorized, local attacker could exploit this to gain higher privileges on the affected system, per the NVD entry and cross-referenced sources. Connected advisories corroborate th...

CVE-2026-50370

CVE-2026-50370 is a heap-based buffer overflow in the Windows DHCP Server service that could allow an unauthenticated attacker on an adjacent network to execute code. The vulnerability is listed among the July 2026 Patch Tuesday disclosures and is included in Microsoft’s security updates (KB50995...

CVE-2026-50407

CVE-2026-50407 : A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized local attacker to elevate privileges. The vulnerability is confirmed in multiple feeds (NVD/NCSC/MSRC) and is listed under ReFS with an impact of local privilege escalation. Microsoft has re...