CVE-2026-83968

CVE-2026-83968 is a use-after-free vulnerability in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (High) with impacts to confidentiality, integrity, and availability all rated High. CISA's SSVC assessment indicates no kn...

CVE-2026-83972

CVE-2026-83972 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker to elevate privileges. The vulnerability requires low privileges and no user interaction , with low attack complexity , scoring 7.8 (HIGH) under CVSS 3.1 with high impact t...

CVE-2026-83977

CVE-2026-83977 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized, low-privilege local attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires n...

CVE-2025-53804

CVE-2025-53804 affects the Windows Kernel and involves exposure of sensitive information to an unauthorized actor, allowing local disclosure. The threat is categorized with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with low complexity, where privileges are low and no user i...

CVE-2025-55687

CVE-2025-55687 is a local privilege-escalation vulnerability in Windows Resilient File System (ReFS) caused by a race condition when concurrent access to a shared resource occurs with improper synchronization. The impact is local elevation of privileges. Public docs (NCSC advisory and EUVD summar...

CVE-2025-58716

CVE-2025-58716 affects Microsoft Windows Speech and is caused by improper input validation, enabling an authorized attacker to perform local privilege escalation. The CVE is documented with a CVSS v3.1 base score of 8.8 (High) and LOCAL attack vector, requiring LOW privileges and no user interact...

CVE-2025-58725

CVE-2025-58725 is described in connected documents as a heap-based buffer overflow in Windows COM that allows a locally authenticated attacker to elevate privileges. The CVE is associated with Windows COM components, with a CVSS v3.1 score of 7.0 (Local, High impact, Privilege escalation) and Exp...

CVE-2025-62571

CVE-2025-62571 is a Windows Installer Elevation of Privilege vulnerability caused by improper input validation. The CVE affects Windows Installer, enabling an authorized, local attacker to escalate privileges (CVSS v3.1: 7.8, Local, Privileges Required: Low, User Interaction: None). Connected sou...

CVE-2026-20826

CVE-2026-20826 describes a race-condition in the Tablet Windows User Interface (TWINUI) Subsystem. The initial entry asserts an information disclosure/elevation of privileges vector via concurrent access to a shared resource, enabling an authorized attacker to elevate privileges locally. Microsof...

CVE-2026-20848

CVE-2026-20848 describes a race condition in Windows SMB Server caused by concurrent execution over a shared resource with improper synchronization. This vulnerability could allow an authorized attacker to elevate privileges over the network. Connected documents confirm the issue is categorized a...

CVE-2026-49168

CVE-2026-49168 is an elevation-of-privilege vulnerability in Windows Storage Spaces Direct caused by an integer overflow/wraparound. The issue, exploitable with physical access, allows an unauthenticated attacker to gain high-impact effects (confidentiality, integrity, and availability). CVSSv3.1...

CVE-2026-69274

CVE-2026-69274 is a Use After Free vulnerability in Windows Win32K that allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 7.1 (HIGH) , with the attack requiring network vector, high complexity , low privileges , and user interaction , impacting con...

CVE-2026-69280

CVE-2026-69280 is a use-after-free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . Microsoft assigned a CVSS 3.1 base score of 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and high impact...

CVE-2026-69309

CVE-2026-69309 is a local privilege escalation vulnerability in Windows Print Spooler Components , caused by a double free defect. An attacker with low local privileges and high attack complexity can exploit it without user interaction to achieve full compromise of confidentiality, integrity, and...

CVE-2026-69345

CVE-2026-69345 is an out-of-bounds read in Microsoft Standard XPS that allows an authorized attacker (low privileges, no user interaction) to disclose information locally , with high confidentiality impact and no integrity or availability impact (CVSS 3.1: 5.5 MEDIUM ). CISA's SSVC assessment rat...

CVE-2026-69368

CVE-2026-69368 is a heap-based buffer overflow in the Windows Overlay Filter component that allows an authorized attacker with local access and low privileges to escalate their privileges. The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact to confidentiality, integrity...

CVE-2026-69403

CVE-2026-69403 is an information disclosure vulnerability in the Windows SMB Server component, caused by missing authorization that allows an authorized (low-privilege) local attacker to disclose information. The impact is limited to confidentiality with no integrity or availability impact. CNA-a...

CVE-2026-69468

CVE-2026-69468 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows a locally authenticated attacker to elevate privileges . Microsoft rates the vulnerability CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requ...

CVE-2026-69628

CVE-2026-69628 is a heap-based buffer overflow in Windows iSCSI that allows an authorized attacker to achieve remote code execution over a network. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) , reflecting a network attack vector, low complexity, low privileges required, no user interactio...

CVE-2026-70563

CVE-2026-70563 is an improper link resolution before file access ("link following") vulnerability in Windows Shell that allows an unauthorized attacker to perform spoofing over a network . The assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, indicating h...

CVE-2026-70572

CVE-2026-70572 is an integer overflow or wraparound vulnerability in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . The root cause lies in improper handling of integer operations within the biometric service component. The vulnerability carries a CV...

CVE-2026-72947

CVE-2026-72947 is an integer underflow (wrap/wraparound) in the Windows File History Service that allows an authorized attacker to achieve local privilege escalation . Microsoft rates it 6.4 MEDIUM (CVSS 3.1, high privileges required), while NVD assigns 7.0 HIGH (low privileges required). CISA's ...

CVE-2026-73020

CVE-2026-73020 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 score of 7.8 (HIGH) and high impact to confidentiality, integrity, ...

CVE-2026-77505

CVE-2026-77505 is a use after free vulnerability in Windows DNS Server that allows an unauthorized, unauthenticated attacker to execute code over a network. The flaw is scored 8.1 (HIGH) under CVSS 3.1, with a network attack vector, high attack complexity, no required privileges, and high impact ...

CVE-2026-78449

CVE-2026-78449 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized attacker to execute code over the network. The vulnerability is rated CVSS 3.1: 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a ne...

CVE-2026-81355

A heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. The vulnerability is rated CVSS 3.1 7.5 (HIGH) with the vector AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H , indicating a local attack vector with high complexity, high privi...

CVE-2026-83967

CVE-2026-83967 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-complexity local attack requiring low privileges an...

CVE-2025-55328

Vulnerability summary (CVE-2025-55328) : A race condition in Windows Hyper-V involving a shared resource can be exploited by an authorized local attacker to elevate privileges. The issue is categorized under Windows Hyper-V with a high impact (local, privilege escalation) and a high base score in...

CVE-2025-59187

CVE-2025-59187 corresponds to a Windows Kernel local privilege escalation described in EUVD-2025-34304 as due to improper input validation. The vulnerability affects the Windows Kernel with the potential for an authorized attacker to elevate privileges locally. The connected KB updates discuss Wi...

CVE-2026-21246

CVE-2026-21246 is a heap-based buffer overflow in the Microsoft Graphics Component that enables local privilege escalation for an authorized attacker. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges, NONE user interaction) yields a base score of 7.8 (HIGH impact on confidentiality, int...

CVE-2026-25174

CVE-2026-25174 is a Windows Privilege Elevation vulnerability described as an out-of-bounds read in the Windows Extensible File Allocation feature. The connected NCSC advisory confirms Microsoft has fixed vulnerabilities across Windows components, listing CVE-2026-25174 under Windows Extensible F...

CVE-2026-49165

The CVE-2026-49165 entry concerns the Microsoft Windows App Store. The connected sources confirm that the vulnerability arises from use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact is information disclosure with local access; CVSS 3.1 factors...

CVE-2026-62726

CVE-2026-62726 is a Windows vulnerability described as a use-after-free in the Windows Telephony Service that enables local privilege escalation by an authorized user. The CVSS 3.1 vector (LOCAL, HIGH impact to confidentiality, integrity, and availability) yields a base score of 7.0. The provided...

CVE-2026-69295

CVE-2026-69295 is an out-of-bounds read in the Windows USB Driver that allows an authorized local attacker to escalate privileges. The flaw yields high impact across confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning a low-...

CVE-2026-69298

CVE-2026-69298 is an elevation of privilege vulnerability in the Windows Biometric Service , caused by an integer overflow or wraparound . An attacker with low-level local privileges can exploit this to gain higher system privileges, with high impact on confidentiality, integrity, and availabilit...

CVE-2026-69331

CVE-2026-69331 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a local attack vector , high complexity , and low privileges required . No user intera...

CVE-2026-69349

CVE-2026-69349 is an information disclosure vulnerability in Windows Management Instrumentation (WMI) caused by use of an uninitialized resource . An authorized attacker can exploit it over a network to disclose information, with high confidentiality impact but no integrity or availability impact...

CVE-2026-69470

Windows Connected User Experiences and Telemetry contains a use-after-free flaw that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low ...

CVE-2026-69472

CVE-2026-69472 is a use-after-free vulnerability in the Windows Devices Human Interface component that allows an authorized, local attacker with low privileges to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) , with high complexity and no user interaction required. The im...

CVE-2026-69476

A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 7.8 (High) with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. No spec...

CVE-2026-69479

CVE-2026-69479 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized local attacker to achieve code execution. The Microsoft-assigned CVSS 3.1 score is 8.4 (HIGH) , with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no privileges or us...

CVE-2026-69494

CVE-2026-69494 is an out-of-bounds read vulnerability in the Windows Event Logging Service that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (CVSS: UI:R) and no prior privileges (PR:N), yielding a CVSS 3.1 score of 8....

CVE-2026-69511

CVE-2026-69511 is a heap-based buffer overflow in Microsoft Windows Media Foundation that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior privileges, with a CVSS 3.1 base score of 8.8 (HIGH) and high impact ...

CVE-2026-69583

Windows Biometric Service is affected by a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) , with local attack vector, low complexity, and low privileges required, resulting in high...

CVE-2026-69612

CVE-2026-69612 is an absolute path traversal vulnerability in Windows Error Reporting that allows an authorized attacker to elevate privileges locally . The flaw resides in how the component handles file paths, permitting traversal beyond the intended directory. The CVSS 3.1 score is 7.8 (HIGH) w...

CVE-2026-69638

CVE-2026-69638 is a heap-based buffer overflow in Windows NTFS (New Technology File System) that allows an unauthorized attacker to execute code locally. The vulnerability requires no privileges and no user interaction, yielding a CVSS 3.1 base score of 8.4 (HIGH) with high impact to confidential...

CVE-2026-69685

Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...

CVE-2026-69727

A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 8.0 (High) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating a network attack vector with low complexity, requiring low privilege...

CVE-2026-69770

CVE-2026-69770 is an information disclosure vulnerability in the Windows Spaceport.sys kernel driver, caused by the use of an uninitialized resource . An authorized attacker with local access and low privileges can exploit it to disclose sensitive information (high confidentiality impact, no inte...

CVE-2026-69794

CVE-2026-69794 is a buffer over-read in Windows Encrypting File System (EFS) that allows an authorized local attacker to disclose information . The flaw resides within the EFS component and results in a confidentiality impact with no integrity or availability impact. The CVSS 3.1 base score is 5....