CVE-2026-54993

CVE-2026-54993 describes a heap-based buffer overflow in Microsoft Windows Media Foundation that could allow a local attacker to execute code on a vulnerable system. The public descriptions in the provided documents identify the affected component as Windows Media Foundation, with the vulnerabili...

CVE-2026-58540

CVE-2026-58540 is a Windows Installer elevation-of-privilege vulnerability. The issue arises from improper authorization in Windows Installer, enabling a locally authenticated attacker to gain elevated privileges. CVSSv3.1 metrics (Microsoft-supplied) indicate a local attack vector, low attack co...

CVE-2026-68819

CVE-2026-68819 is a Windows Network File System vulnerability characterized by a buffer over-read that enables a remote attacker to cause a Denial of Service over the network. Public sources (NVD) describe it as a network-exploitable issue with no required user interaction, resulting in availabil...

CVE-2025-59511

CVE-2025-59511 : External control of a file name or path in the Windows WLAN Service enables a local attacker with low privilege to escalate privileges. The NVD entry and the Dutch NCSC advisory corroborate a local-priority, high-impact privilege-escalation scenario tied to Windows WLAN Service. ...

CVE-2025-59514

Technical details about CVE-2025-59514 are not provided in the supplied documents. No affected product versions, root cause, or remediation are specified here. Monitor for updates from official sources for confirmation and fixes.

CVE-2025-60714

Technical details for CVE-2025-60714 are not provided in the supplied documents. Connected KB/MS update entries discuss Windows Secure Boot and general OS updates but do not disclose affected products, root cause, or fixes for this CVE. Monitor for updates.

CVE-2025-60717

CVE-2025-60717 is a use-after-free vulnerability in Windows Broadcast DVR User Service that allows an authorized user to gain elevated privileges locally. The connected sources (NVD, CVE lists, and EU/NCSc advisories) corroborate the affected component and privilege-elevation impact, with no publ...

CVE-2026-62726

CVE-2026-62726 is a Windows vulnerability described as a use-after-free in the Windows Telephony Service that enables local privilege escalation by an authorized user. The CVSS 3.1 vector (LOCAL, HIGH impact to confidentiality, integrity, and availability) yields a base score of 7.0. The provided...

CVE-2025-62217

Technical details about CVE-2025-62217 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories for affected products, impact, and remediation.

CVE-2026-32153

CVSS and impact : CVE-2026-32153 is a local privilege escalation in the Windows Speech Runtime (Windows Speech) caused by a use-after-free condition in Microsoft Windows Speech. The vulnerability can be exploited locally by an authorized user with low privileges and no user interaction to obtain ...

CVE-2026-32217

CVE-2026-32217 affects Windows Kernel. The vulnerability arises from insertion of sensitive information into a log file, enabling an authorized, local attacker with LOW privileges to disclose information. CVSS v3.1 is provided as 5.5 MEDIUM (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Microsoft and par...

CVE-2026-49793

CVE-2026-49793 is a heap-based buffer overflow in the Windows Resilient File System (ReFS) that could allow an authorized local attacker to execute code. Affected component: ReFS mechanisms handling memory allocations during I/O; root cause described as a heap-based overflow, enabling code execut...

CVE-2026-50397

CVE-2026-50397 is a Windows Kernel Use-After-Free vulnerability that allows an authenticated local attacker to elevate privileges. Root cause: use-after-free in the kernel. Impact: local privilege escalation with high severity (CVSS v3.1: 7.0, HIGH). Exploitation details are not provided in the s...

CVE-2026-23672

CVE-2026-23672 corresponds to a Privilege Elevation vulnerability in the Windows Universal Disk Format File System Driver (UDFS). The NVD entry confirms an Elevation of Privilege impact with a CVSS v3.1 base score of 7.8 (Local, Privileges Required: Low, No user interaction) and indicates a Windo...

CVE-2026-49168

CVE-2026-49168 is an elevation-of-privilege vulnerability in Windows Storage Spaces Direct caused by an integer overflow/wraparound. The issue, exploitable with physical access, allows an unauthenticated attacker to gain high-impact effects (confidentiality, integrity, and availability). CVSSv3.1...

CVE-2026-50668

CVE-2026-50668 is a heap-based buffer overflow in Windows NTFS that can elevate privileges on a system with physical access. The entry, described across multiple sources, identifies the affected component as Windows NTFS and notes a privilege-escalation impact with a physical-attack attack vector...

CVE-2026-50672

CVE-2026-50672 (Windows NTFS) is a use-after-free vulnerability in the Windows NTFS subsystem that can allow an authorized local attacker to elevate privileges. The issue stems from a heap-use-after-free in NTFS handling, enabling code execution with the attacker’s privileges on the affected syst...

CVE-2026-50696

CVE-2026-50696 is a heap-based buffer overflow in the Windows Internet Key Exchange (IKE) Protocol that allows an unauthenticated, network-based attacker to cause a denial of service. The vulnerability is documented across several sources (NVD and CVE records), with a CVSS v3.1 base score of 7.5 ...

CVE-2026-58637

CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...

CVE-2026-50344

CVE-2026-50344 corresponds to an Windows OLE elevation-of-privilege vulnerability. Description from sources: “Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.” Exploitation details are not provided beyond that this is a local privilege escalation ...

CVE-2025-62208

CVE-2025-62208 affects Windows License Manager. The issue involves insertion of sensitive information into a log file, enabling an authorized local attacker to disclose data. Impact is local information disclosure; CVSS from Microsoft indicates low access/privilege requirements with local access,...

CVE-2026-56650

CVE-2026-56650 is a Windows Network File System (NFS) vulnerability. A heap-based buffer overflow in NFS allows an authenticated local attacker to escalate privileges. The CVE entry is supported by multiple sources (NVD/MSRC/CIRCL/NCSC) with consistent description and references. Microsoft has re...

CVE-2025-62209

CVE-2025-62209 concerns the Windows License Manager. The vulnerability involves insertion of sensitive information into a log file, which could allow an authorized local attacker to disclose sensitive information. The CVSS 3.1 metrics (local, low attack complexity, low privileges required) indica...

CVE-2026-20823

CVE-2026-20823 is a Windows File Explorer information disclosure vulnerability that could allow a local attacker to view sensitive data. The CVE is mapped to Windows components handling File Explorer data exposure; its impact is confined to local access with low complexity and low privileges requ...

CVE-2026-58534

CVE-2026-58534 is a Windows IME heap-based buffer overflow vulnerability that enables local privilege escalation for an authenticated attacker. The affected component is the Microsoft Input Method Editor (IME) in Windows. The root cause, per the available sources, is a heap-based buffer overflow ...