CVE-2025-62565

CVE-2025-62565 is a Windows Shell elevation-of-privilege vulnerability caused by a use-after-free in Windows Shell. A locally authenticated attacker can exploit it to elevate privileges; CVSSv3.1 base score 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and U...

CVE-2026-54122

CVE-2026-54122 describes a heap-based buffer overflow in Windows GDI+ that enables local code execution by an unauthenticated attacker. The vulnerability affects the Windows GDI+ component and is rated high (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 8.4). The available documents confirm the ...

CVE-2026-54987

CVE-2026-54987 is a Windows vulnerability described as a heap-based buffer overflow in the Windows Overlay Filter, enabling a locally authenticated attacker to elevate privileges. The CVSSv3.1 score is 7.8 (HIGH) with local attack vector, low attack complexity, and requires low privileges with no...

CVE-2026-61360

The CVE-2026-61360 entry concerns an issue in Windows GDI described as an untrusted pointer dereference that could allow an authorized attacker to disclose information locally. Affected component is Windows GDI; root cause is a pointer dereference involving untrusted data, enabling local informat...

CVE-2026-62711

The CVE-2026-62711 issue is a local privilege escalation caused by a use-after-free in Windows Win32K. Affected component: Win32K memory management; root cause: use-after-free vulnerability. Impact, if exploited: an authorized local attacker can elevate privileges. CVSS v3.1 score is 7.8 ( HIGH )...

CVE-2026-62774

Technical details are not publicly available in the provided documents for CVE-2026-62774. Monitor for updates on affected products, impact, and remediation.

CVE-2026-65671

The CVE-2026-65671 entry describes a heap-based buffer overflow in Windows Remote Access API that allows an authorized attacker to achieve local privilege escalation. The impact is indicated as high (CVSSv3.1 base score 7.8) with local access required and no user interaction. Public details in th...

CVE-2025-53141

CVE-2025-53141 refers to a null pointer dereference in the Windows Ancillary Function Driver for WinSock that can enable local privilege escalation for an authenticated user. The connected Windows-ecosystem data identifies this CVE as affecting the WinSock ancillary driver with a high base severi...

CVE-2025-54098

Technical details about CVE-2025-54098 (Hyper-V local privilege elevation) are not provided in the connected documents. Monitor for future updates from Microsoft for affected products, impact, and mitigations.

CVE-2025-55701

Technical details for CVE-2025-55701 (affected product/component/versions, root cause, exploit information, or remediation) are not publicly provided in the connected documents; monitor for updates from official sources.

CVE-2025-59200

CVE-2025-59200 describes a race-condition vulnerability in the Data Sharing Service Client where concurrent access to a shared resource allows an unauthorized local attacker to spoof locally. The CVE entry states a base CVSS v3.1 score of 7.7 ( HIGH ), with LOCAL attack vector, LOW confidentialit...

CVE-2025-59202

CVE-2025-59202 is a local privilege escalation via a use-after-free in Windows Remote Desktop Services. The Connected documents confirm affected component as Windows Remote Desktop Services and list the CVE with a high-severity context, but do not provide exploit details. No root-cause specifics ...

CVE-2025-59214

CVE-2025-59214 is a Microsoft Windows File Explorer spoofing and information-disclosure vulnerability. Public advisories describe exposure of sensitive information to unauthorized actors, enabling spoofing over a network via Windows File Explorer. Multiple connected sources confirm that Windows F...

CVE-2026-20812

CVE-2026-20812 is an LDAP tampering vulnerability in Windows LDAP (the Lightweight Directory Access Protocol) caused by improper input validation. The issue is exploitable by an authorized attacker over the network and primarily impacts data integrity (CVE CVSS indicates network access, low privi...

CVE-2026-20814

CVE-2026-20814 is a local privilege-escalation in the Microsoft Graphics Kernel caused by a race condition when accessing a shared resource. An authorized local attacker could elevate privileges on affected Windows systems. The issue is documented in multiple sources (e.g., CVE lists and ENISA EU...

CVE-2026-20872

CVE-2026-20872 affects Windows NTLM: external control of a file name or path allows an attacker to spoof authentication over the network. The description states this vulnerability and related references indicate a Windows NTLM spoofing risk. The connected Nessus/NCSC/EUVD/NVD entries confirm the ...

CVE-2026-20928

CVE-2026-20928 affects Windows Recovery Environment Agent. Root cause: improper removal of sensitive information before storage/transfer. Impact: allows bypass of a security feature with physical access; confidentiality is impacted. Affected product: Windows Recovery Environment Agent component. ...

CVE-2026-25171

Use-after-free in Windows at the level of Windows Authentication Methods allows an authorized attacker to elevate privileges locally. The vulnerability, CVE-2026-25171, is documented as a local privilege escalation in Windows Authentication Methods; exploitation requires the attacker to be locall...

CVE-2026-32151

CVE-2026-32151 is a Windows Shell information disclosure vulnerability. The entry shows a network-based exploit with low privileges required and no user interaction, and a high impact on confidentiality (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; base score 6.5). The official fix is noted as ...

CVE-2026-45588

CVE-2026-45588 concerns a protection mechanism failure in Windows Secure Boot that allows an authorized attacker to bypass a security feature locally. The NVD/CVE entry describes a local attack with high impact on confidentiality and integrity and no availability impact, requiring high privileges...

CVE-2026-50313

CVE-2026-50313 is a Windows NTFS heap-based buffer overflow vulnerability that could allow an attacker to achieve local code execution. The CVE entry describes a heap-based overflow in NTFS that enables exploitation by a privileged/unauthenticated attacker with local access, with the NVD entry al...

CVE-2026-50334

CVE-2026-50334 is a Windows Push Notifications/Windows Notification information disclosure vulnerability. The NVD description states an unauthorized local actor could disclose sensitive information. The CIRCL seen entries corroborate a Windows notification component issue with multiple advisories...

CVE-2026-50351

The CVE-2026-50351 issue concerns Windows Audio Compression Manager (ACM). It describes improper access control that could let an authenticated, local attacker elevate privileges on affected Windows systems. Documented impact is local privilege escalation with high severity (CVSS v3.1 base score ...

CVE-2026-50352

CVE-2026-50352 affects Windows Cryptographic Services. Description: Exposure of sensitive information to an unauthorized actor allows a locally authenticated attacker to disclose information. Impact: information disclosure (CONFIDENTIALITY) with LOCAL attack vector; CVSS 3.1 base 5.5 (AV:L/AC:L/P...

CVE-2026-50356

CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...

CVE-2026-50363

CVE-2026-50363 is a Windows Push Notifications elevation-of-privilege vulnerability characterized by a heap-based buffer overflow. An authorized, local attacker could escalate privileges. Microsoft has released updates addressing this (e.g., KB5095051 and MSRC/MSVC advisories) and recommends appl...

CVE-2026-50497

CVE-2026-50497 is an off-by-one error in Windows Remote Desktop Protocol that allows an unauthenticated network attacker to disclose information. Public sources in the provided documents identify the affected component as RDP and describe a network-triggered information disclosure, without detail...

CVE-2026-50686

CVE-2026-50686 is a Windows OLE remote code execution vulnerability caused by a type confusion in resource access. It enables network-exposed code execution without authentication and is documented with CVSS v3.1 base score 8.1 (High). Public references identify the affected area as Windows OLE, ...

CVE-2026-54119

CVE-2026-54119 describes a loop with an unreachable exit condition in Windows Active Directory that can be exploited to cause a network-based denial of service by an unauthorized attacker. The affected component is Windows Active Directory; the vulnerability stems from an infinite loop, leading t...

CVE-2026-56647

CVE-2026-56647 is a Windows vulnerability in the Windows Remote Access Service Infrastructure where an integer overflow/wraparound can let an authorized attacker elevate privileges over a network. The affected component is the Windows Remote Access Service Infrastructure, and the root cause is an...

CVE-2026-57083

CVE-2026-57083 : A vulnerability in the Windows Codecs Library (Windows Media Photo Codec) arises from use of an uninitialized resource, enabling a local attacker to disclose information. Documented impact is local information disclosure with a CVSS 3.1/5.5 (Local, Privileges NONE, User Interacti...

CVE-2026-58629

CVE-2026-58629 is a Windows DirectX vulnerability described as a use-after-free in the DirectX Graphics Kernel that allows a locally authenticated attacker to elevate privileges. The NVD entry notes a local attack vector with high impact (C/H/I/A all high) and the CVSSv3.1 score of 7.0 (Local, Pr...

CVE-2026-61364

The CVE-2026-61364 entry concerns Windows Remote Desktop Services. A missing authentication flaw in a critical function enables a locally authenticated attacker with low privileges to elevate to higher privileges, as indicated by the CVSS 3.1 vector (L/L). Exploitation details or in-the-wild stat...

CVE-2026-61926

CVE-2026-61926 : Heap-based buffer overflow in the Windows USB Driver allows an authorized local attacker to perform a local privilege escalation . Exploitation details are not provided beyond the CVSS metrics (LOCAL, LOW complexity, LOW privileges, NONE user interaction; high impact to confident...

CVE-2026-61937

CVE-2026-61937 is a Windows HTTP.sys elevation-of-privilege vulnerability caused by an integer overflow/wraparound. An authenticated, local attacker could exploit this to gain elevated privileges on affected systems. The available documents identify the vulnerable component as Windows HTTP.sys an...

CVE-2026-62773

CVE-2026-62773 describes a use-after-free vulnerability in Windows Kerberos that enables a locally authenticated attacker to elevate privileges. The flaw is triggered in the Kerberos subsystem and, when exploited, could allow elevation of rights with high impact on confidentiality, integrity, and...

CVE-2026-62812

CVE-2026-62812 concerns Windows DHCP Server and describes an elevation of privilege via improper link resolution before file access ('link following'). An attacker with local, low-privilege access and no user interaction could elevate privileges to achieve high impact (CVSS v3.1: AV:L/AC:L/PR:L/U...

CVE-2025-50155

CVE-2025-50155 corresponds to a local privilege-escalation vulnerability in Windows Push Notifications. Affected component: Windows Push Notifications service. Root cause: access of a resource using an incompatible type (type confusion). Impact: authorized attacker on the same device can escalate...

CVE-2025-54091

Technical details for CVE-2025-54091 are not publicly provided in the connected documents. The initial description notes a local privilege elevation via Hyper-V, but no specific root cause, affected products, or fixes are given here. Monitor for updates.

CVE-2026-20832

CVE-2026-20832 is a Windows component vulnerability described as a Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege. Connected documents confirm the flaw affects the Windows RPC IDL handling, enabling local privilege escalation with high impact. The vulnera...

CVE-2026-20834

CVE-2026-20834 affects Windows Shell (Windows Shell component) with a spoofing impact described in the Windows Shell entry: ability to pretend to be another user (CVSS v3.1 base 4.6; AV:P, AC:L, PR:N, UI:N, S:U, C:H, I:N, A:N). Connected docs corroborate a Windows Shell vulnerability tied to CVE-...

CVE-2026-20934

Technical details about CVE-2026-20934 are not publicly provided in the supplied connected documents. Monitor for updates from Microsoft and security advisories.

CVE-2026-26173

CVE-2026-26173 affects the Windows Ancillary Function Driver for WinSock and is described as a race-condition vulnerability in a shared-resource path that can allow an authenticated local attacker to elevate privileges to SYSTEM. The connected sources confirm this is a Windows elevation-of-privil...

CVE-2026-26177

Technical details about CVE-2026-26177 are not provided in the supplied documents. Monitor for updates from Microsoft and the CVE record.

CVE-2026-32214

Technical details about CVE-2026-32214 are not provided in the given documents. No explicit affected products, vulnerable components, impact, or remediation details are disclosed here. Monitor for updates from official sources.

CVE-2026-50325

Technical details (affected versions, root cause, remediation) are not provided in the supplied documents; monitor for updates.

CVE-2026-57979

CVE-2026-57979 describes an out-of-bounds read in Windows Remote Desktop Protocol (RDP) that could allow an unauthenticated or network-attached attacker to disclose information over the network. Publicly referenced sources (NVD, MSRC updates, ENISA EUVD, and security advisories) corroborate an in...

CVE-2026-61366

Affected component: Windows Network Connection Broker. Vulnerability: double free allows local privilege escalation by an authorized user. Root cause: double-free in the broker when handling network connection objects. Impact: high; local attacker with low privileges and no user interaction can e...

CVE-2026-62797

Technical details about CVE-2026-62797 are not publicly available in the provided documents. The descriptions only note a heap-based buffer overflow in Windows NTFS causing local privilege escalation. Monitor for updates.

CVE-2025-50159

CVE-2025-50159 : Use-after-free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS can enable an authorized local user to escalate privileges. CVSS v3.1 base score 7.3 (LOCAL, LOW complexity, LOW privileges, USER interaction required; confidentiality/integrity/availability High). Affected com...