CVE-2025-59277

CVE-2025-59277 involves improper validation of a specified input type in Windows Authentication Methods, enabling a locally authenticated attacker to elevate privileges. Connected MSKBs and EUVD-2025-34369 corroborate the Windows Authentication Methods focus and local privilege escalation risk. T...

CVE-2025-64673

CVE-2025-64673 is a Windows Storage VSP Driver elevation-of-privilege vulnerability in the Storvsp.sys component. The connected sources confirm improper access control in Storvsp.sys that could allow an authorized, local attacker with low privileges to obtain higher privileges. The CVSS v3.1 base...

CVE-2026-20861

CVE-2026-20861 describes a race condition in Windows Management Services that allows an authorized, local attacker to elevate privileges. The connected documents corroborate that this CVE is associated with Windows Management Services and appears in Microsoft‑affecting security updates released J...

CVE-2026-23671

CVE-2026-23671 is a Windows Bluetooth RFCOM Protocol Driver elevation of privilege vulnerability. A locally exposed issue could allow an attacker with low privileges and no user interaction to escalate privileges via the Bluetooth stack’s RFCOM Protocol Driver; exploitation maturity is UNPROVEN. ...

CVE-2026-27908

CVE-2026-27908 is a Windows Elevation of Privilege vulnerability in the TDI Translation Driver (tdx.sys). The CVSS 3.1 base score is 7.0 (HIGH) with LOCAL attack vector, HIGH impact to confidentiality, integrity, and availability. Exploitation is deemed UNPROVEN and requires LOW privileges with N...

CVE-2026-27916

CVE-2026-27916 describes a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that could allow an authorized, local attacker to elevate privileges. The connected documents confirm this CVE is associated with the UPnP Device Host and that Microsoft has published updates to fix vu...

CVE-2026-32086

CVE-2026-32086 is an Elevation of Privilege vulnerability in Windows’ Function Discovery Service (fdwsd.dll). The entry notes local attack potential with a HIGH impact on confidentiality, integrity, and availability, requiring LOW privileges and no user interaction. The CVSS details indicate a HI...

CVE-2026-35424

Technical details about CVE-2026-35424 (affected products, root cause, exploitability, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2026-41087

CVE-2026-41087 affects Windows File Explorer; a local attacker can cause exposure of sensitive information to obtain disclosure on the host. The vulnerability is rated CVSSv3.1: 5.5 (Medium) with Local access, Low attack complexity, Privileges Required: Low, no user interaction, and Confidentiali...

CVE-2026-42905

The CVE-2026-42905 entry describes a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to escalate privileges locally. Affected component: Windows DWM Core Library. Root cause: use-after-free condition leading to local privilege escalation. Impact: el...

CVE-2026-50329

CVE-2026-50329 is a Windows DWM Core Library elevation-of-privilege vulnerability rooted in a use-after-free in the Windows kernel. The available connected sources confirm the affected component as Windows DWM Core Library (Windows Kernel) and describe local privilege escalation possible by an au...

CVE-2026-50373

CVE-2026-50373 affects the Microsoft Windows Search Component (Windows Search Service). It enables local elevation of privileges via improper access control. Microsoft has released updates (e.g., KB5101650 and MSRC guidance) to address the vulnerability; apply the available security updates to mi...

CVE-2026-50432

CVE-2026-50432 describes a Use-after-free vulnerability in the Windows Virtual Filtering Platform (VFP) . An authenticated attacker could trigger a denial-of-service condition over the network by exploiting this flaw in the VFP code path, as indicated by the CVE entry: AV:N/AC:H/PR:L/UI:N/S:U/C:N...

CVE-2026-62876

The CVE-2026-62876 vulnerability affects Windows Win32K, with an out-of-bounds read that allows an authorized, local attacker to elevate privileges. Affected component: Win32K (Windows). Root cause and impact are: local escalation to higher integrity/privilege with potential confidentiality, inte...

CVE-2026-69420

CVE-2026-69420 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver that allows an authorized local attacker to escalate privileges . The CVSS 3.1 base score is 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interaction, and high impact on c...

CVE-2026-69694

CVE-2026-69694 affects the Windows IP Address Management (IPAM) Service . The root cause is deserialization of untrusted data , which allows an authorized attacker to escalate privileges locally. The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating tha...

CVE-2026-72987

CVE-2026-72987 is a use after free vulnerability in Windows DNS that allows an unauthorized attacker to execute code over a network, resulting in full compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.1 (HIGH) , with a network attack vector, high complexity,...

CVE-2026-80096

CVE-2026-80096 is an out-of-bounds read vulnerability in Windows Remote Desktop Services that allows an authorized attacker to elevate privileges over a network. Microsoft rated it CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw req...

CVE-2025-49658

CVE-2025-49658 is an information-disclosure vulnerability in Windows that arises from an out-of-bounds read in the TDX.sys driver. Impact: an authenticated, local attacker with LOW privileges could disclose sensitive data (C: HIGH, I: NONE, A: NONE; CVSS 5.5/LOCAL). Affected component: Windows Tr...

CVE-2025-54093

CVE-2025-54093 is described as a time-of-check time-of-use (TOCTOU) race in the Windows TCP/IP stack that can enable a locally authenticated attacker to elevate privileges. Connected sources reference this CVE in the context of Windows TCP/IP and note it as a local-privilege-escalation issue, wit...

CVE-2026-25180

CVE-2026-25180 describes an out-of-bounds read in the Microsoft Graphics Component that can allow an unauthorized local attacker to disclose information. Connected sources (NVD, CVE listing, ENISA/NCSC advisories) confirm the affected component as Microsoft Graphics Component and the impact as lo...

CVE-2026-25190

CVE-2026-25190 is a Windows GDI vulnerability (Untrusted search path) that enables local code execution. The CVE is documented across NVD/NCSC/EUVD with a base CVSS v3.1 score of 7.8 (High) and a local attack vector requiring user interaction. Microsoft has released fixes via March 2026 updates (...

CVE-2026-27923

CVE-2026-27923 is a Windows Desktop Window Manager elevation-of-privilege vulnerability (CVSS 3.1 base 7.8, HIGH). Local attacker with low privileges and no user interaction could exploit in an UNPROVEN-exploit state to achieve high confidentiality, integrity, and availability impact. The entry l...

CVE-2026-40399

Technical details about CVE-2026-40399 are not publicly available in the provided documents. Monitor for updates from the original sources; current descriptions only state a stack-based buffer overflow in Windows TCP/IP enabling local privilege elevation.

CVE-2026-49800

CVE-2026-49800 affects Windows Web Proxy Auto-Discovery Protocol (WPAD). Root cause is an integer overflow/wraparound in WPAD handling. Impact described as local privilege escalation for an authorized attacker, with high confidentiality, integrity, and availability impact. No specific exploit det...

CVE-2026-50318

CVE-2026-50318 affects the Windows Resilient File System (ReFS). It describes a stack-based buffer overflow that allows an authorized local attacker to elevate privileges. The CVSSv3.1 vector is LOCAL/LOW+LOW/LOW with no user interaction and implies high impact on confidentiality, integrity, and ...

CVE-2026-50383

CVE-2026-50383 is a Windows Print Spooler Information Disclosure vulnerability (buffer over-read) in Print Spooler Components. It allows a locally authenticated attacker to disclose information on the affected system. According to the provided data, the attack vector is Local, with Low privileges...

CVE-2026-54987

CVE-2026-54987 is a Windows vulnerability described as a heap-based buffer overflow in the Windows Overlay Filter, enabling a locally authenticated attacker to elevate privileges. The CVSSv3.1 score is 7.8 (HIGH) with local attack vector, low attack complexity, and requires low privileges with no...

CVE-2026-58601

CVE-2026-58601 describes a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized, local attacker to elevate privileges. The available description specifies a local-privelege-escalation impact, but does not provide product/version specifics, exploitati...

CVE-2026-78444

CVE-2026-78444 is an untrusted pointer dereference vulnerability in Windows Failover Cluster that allows an unauthorized, network-based attacker to achieve remote code execution . The attack requires high complexity but no prior privileges or user interaction, with high impact to confidentiality,...

CVE-2025-47972

CVE-2025-47972 affects the Microsoft Input Method Editor (IME) in Windows. Connected records reflect a high-severity, privilege-escalation risk with CVSS v3.1 base score 8.0 (attack vector: network; impact: confidentiality, integrity, and availability high; privileges required: low; user interact...

CVE-2025-47991

CVE-2025-47991 maps to a Microsoft IME (Input Method Editor) use-after-free vulnerability reported as a resource-management error that can enable local privilege escalation. Connected CNVD-2025-16874 corroborates an IME privilege-elevation risk from Microsoft IME. Publicly stated impact in the CV...

CVE-2025-49675

Technical details (affected product, exploit specifics, root cause) are not provided in the connected documents. Monitor for official CVE disclosures and vendor advisories for concrete remediation and impact.

CVE-2025-49683

Technical details about CVE-2025-49683 (VHDX integer overflow) are not provided in the connected documents. Monitor for updates.

CVE-2025-49732

Technical details about CVE-2025-49732 are not provided in the connected documents. Public information appears limited to the CVE entry and general Microsoft updates; monitor for official advisories for affected products, impact, and fix timing.

CVE-2025-55326

CVE-2025-55326 is a Windows Cdpsvc (Connected Devices Platform Service) use-after-free vulnerability enabling remote code execution over a network. The provided connected documents confirm the issue, its network vector and a high risk (CVSS 3.1: 7.5, network attack, no privileges). Remediation in...

CVE-2025-55701

Technical details for CVE-2025-55701 (affected product/component/versions, root cause, exploit information, or remediation) are not publicly provided in the connected documents; monitor for updates from official sources.

CVE-2025-62470

CVE-2025-62470 is a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that enables a locally authenticated attacker to escalate privileges. The vulnerability affects the CLFS driver in Windows, with local access required and high impact on confidentiality, integrity, ...

CVE-2026-21244

CVE-2026-21244 affects Windows Hyper-V with a heap-based buffer overflow that enables local code execution by an authenticated attacker. The CVSS 3.1 vector ( LOCAL, LOW PR, LOW AC, USER INTERACTION REQUIRED, S: U ) indicates high impact to confidentiality, integrity, and availability if exploite...

CVE-2026-21249

Technical details about CVE-2026-21249 are not provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.

CVE-2026-34336

Technical details (affected product/version, root cause, exploit information, or patch specifics) are not provided in the supplied documents. Monitor for updates as public details may be released separately.

CVE-2026-34341

CVE-2026-34341 is a Windows LLDP (Link-Layer Discovery Protocol) vulnerability described as a double free in LLDP that allows an authenticated, local attacker to gain elevated privileges. The connected documents confirm the issue and impact (local privilege escalation) but do not provide concrete...

CVE-2026-45637

CVE-2026-45637 is a use-after-free vulnerability in Windows DWM Core Library that permits a locally authenticated attacker to achieve elevation of privileges. The underlying flaw is a use-after-free condition in the DWM Core Library, enabling an attacker with low privileges and no user interactio...

CVE-2026-45638

CVE-2026-45638 relates to Windows’ Ancillary Function Driver for WinSock and is due to a use-after-free in that driver. This vulnerability allows an authorized attacker to escalate privileges locally. The available documents specify the affected component and the local-privilege-escalation impact...

CVE-2026-50313

CVE-2026-50313 is a Windows NTFS heap-based buffer overflow vulnerability that could allow an attacker to achieve local code execution. The CVE entry describes a heap-based overflow in NTFS that enables exploitation by a privileged/unauthenticated attacker with local access, with the NVD entry al...

CVE-2026-50321

CVE-2026-50321 is a Windows USB Driver elevation-of-privilege vulnerability (race condition on a shared resource). An authorized, local attacker could exploit this to gain higher privileges on the affected system, per the NVD entry and cross-referenced sources. Connected advisories corroborate th...

CVE-2026-50409

CVE-2026-50409 affects the Windows Overlay Filter. The issue is an information disclosure where an authorized attacker can locally access sensitive information exposed by the Overlay Filter. The base CVSS v3.1 is 5.5 (Local, Low Attack Complexity, Low Privileges) with High confidentiality impact....

CVE-2026-50450

CVE-2026-50450 describes a race condition in Windows Wireless Wide Area Network Service where concurrent execution on a shared resource with improper synchronization can allow an authenticated, local attacker to elevate privileges. The CVE is associated with a local exploit vector and a base CVSS...

CVE-2026-50495

CVE-2026-50495 is a Windows DNS vulnerability described as improper access control that could allow an authorized local attacker to tamper DNS-related data. Multiple connected sources (NVD entry and MSRC update guidance) confirm this as a locally exploitable issue with a baseline CVSS v3.1 score ...

CVE-2026-50496

CVE-2026-50496 is an out-of-bounds read vulnerability in Windows Network Policy Server SNMP that allows an unauthenticated attacker to disclose information over the network. Affects the SNMP component of Windows NPS; impact is information disclosure with a CVSS v3.1 base score of 7.5 (Network att...