CVE-2026-62908

CVE-2026-62908: A race condition in the Windows Backup Engine allows local privilege escalation by an authorized attacker. Documented impact: high across confidentiality, integrity, and availability (CVSS 3.1 base score 7.0; LOCAL access; HIGH likelihood of impact). Affected component is the Wind...

CVE-2026-27915

CVE-2026-27915 affects Windows UPnP Device Host. It enables local privilege escalation with a low attack complexity and no user interaction, requiring limited privileges and resulting in high confidentiality, integrity, and availability impact. The CVSSv3.1 base score is 7.8 ( HIGH ), with exploi...

CVE-2026-32091

CVE-2026-32091 is a Microsoft elevation of privilege vulnerability in the Brokering File System with a CVSS 3.1 base score of 8.4 (HIGH). It is a local, no-user-interaction attack requiring no privileges, with high impact on confidentiality, integrity, and availability. The exploitation status is...

CVE-2026-65678

CVE-2026-65678: A use-after-free in Windows Win32K enables an in-local privilege elevation by an authorized attacker. Affected software is Windows with Win32K component; the vulnerability arises from improper lifecycle handling leading to use-after-free conditions. The CVSS score is 7.0 (High) wi...

CVE-2026-65799

CVE-2026-65799 is an integer overflow or wraparound vulnerability in the Windows DNS service that allows an authorized local attacker to elevate privileges . The FSTEC BDU further characterizes the root cause as a buffer overflow in dynamic memory . Microsoft rates it CVSS 6.7 (MEDIUM) with high ...

CVE-2024-43558

CVE-2024-43558 is a Windows Mobile Broadband Driver Denial of Service vulnerability. Affected component: Windows Mobile Broadband Driver. Underlying impact: Denial of Service (availability impact stated). CVSSv3.1 base score 6.5 (Adjac ent attack vector, Low attack complexity, No privileges, No u...

CVE-2025-29958

Technical details about CVE-2025-29958 (uninitialized resource in RRAS) are not public in the provided documents. Monitor for vendor advisories and future updates.

CVE-2025-29960

CVE-2025-29960: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) can lead to information disclosure over the network. The description specifies network-based access with high confidentiality impact; no explicit product version or fix details are provided in the connected doc...

CVE-2026-20940

CVE-2026-20940 is a heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver that enables a locally authenticated attacker to elevate privileges. Connected advisories confirm the affected component (Cloud Files Mini Filter Driver) and the privilege-escalation impact; Microsoft has...

CVE-2026-25178

CVE-2026-25178 affects Windows Ancillary Function Driver for WinSock and is classified as a use-after-free that can lead to local elevation of privileges. Public documentation in NVD/CVE and EUVD/NCSC confirms the affected component and privilege escalation impact. Microsoft has released security...

CVE-2026-26155

CVE-2026-26155 is a Microsoft Local Security Authority Subsystem Service information disclosure vulnerability. The entry lists a CVSS v3.1 base score 6.5 (MEDIUM) with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a Network attack vector, low complexity , and low privileges requ...

CVE-2026-26172

CVE-2026-26172 affects Windows Push Notifications. Root cause: concurrent execution on a shared resource with improper synchronization (race condition) leading to local privilege escalation by an authorized user. Impact per sources is elevation of privileges; exploitation status is not detailed i...

CVE-2026-42903

Windows Kerberos in Windows is affected by CVE-2026-42903, a null pointer dereference that can be exploited by an authorized attacker over the network to cause a denial of service. The CVSS data indicates network access with low attack complexity, low privileges required, no user interaction, and...

CVE-2026-50451

CVE-2026-50451 affects Windows Routing and Remote Access Service (RRAS): missing authentication for a critical function enables local privilege escalation by an authorized attacker. Documented impact is privilege escalation (local), base CVSSv3.1 7.1 (HIGH); remediation is Microsoft security upda...

CVE-2026-61939

CVE-2026-61939 is a Winlogon-use-after-free vulnerability that allows an authorized, low-privilege attacker to elevate privileges locally. Public description confirms local access as attack vector (LOCAL) with high impact on confidentiality, integrity, and availability. The CVSS 3.1 vector is AV:...

CVE-2026-62710

CVE-2026-62710 : Heap-based buffer overflow in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. This entry is supported by multiple sources: the NVD/NVD-derived description confirms a local, privilege-escalation flaw with high impact (confidentia...

CVE-2026-62770

CVE-2026-62770: Heap-based buffer overflow in Windows Shell is disclosed as a local privilege escalation vulnerability. Affects Windows Shell components; attacker must be authorized and can escalate privileges locally without user interaction (low privileges required, local access). CVSS 3.1 base...

CVE-2026-62785

CVE-2026-62785: Heap-based buffer overflow in Windows LDAP (Lightweight Directory Access Protocol) allows unauthenticated remote code execution over the network. Affected: Windows LDAP service. Root cause: improper heap handling leading to overflow. Impact: remote code execution with high severit...

CVE-2026-62881

The CVE-2026-62881 entry describes a numeric truncation flaw in Windows DNS that allows an authenticated, local attacker to elevate privileges. Affected component is the Windows DNS service; root cause is a numeric truncation error. Exploitation is local with high privileges required and no user ...

CVE-2025-29961

Technical details for CVE-2025-29961 are not provided in the connected documents. The RRAS out-of-bounds read description exists in the Initial Document, but no vendor/affected versions, root cause, or fixes are confirmed here. Monitor for updates.

CVE-2025-49667

Technical details about CVE-2025-49667 are not publicly provided in the supplied connected and initial documents. Monitor for updates from official advisories; current materials only indicate a local privilege escalation via Win32K ICOMP without specifics.

CVE-2026-32161

CVE-2026-32161 describes a race condition in the Windows Native WiFi Miniport Driver caused by improper synchronization, enabling an adjacent-network attacker to potentially execute code on the vulnerable system. The description across sources notes a remote-code-execution impact with a CVSS v3.1...

CVE-2026-40407

CVE-2026-40407 describes a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that permits an authorized, local attacker to elevate privileges. The vulnerability impact is local privilege escalation with a CVSS v3.1 base score of 7.8 (HIGH) and impact to confidentialit...

CVE-2026-42969

Technical details about CVE-2026-42969 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-44812

CVE-2026-44812 affects Windows graphics component Win32K GRFX, where an integer overflow/wraparound in GRFX can allow an unauthorized attacker to execute code locally. The CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Exploitation details are not provide...

CVE-2026-45641

CVE-2026-45641 affects Windows Hyper-V. The vulnerability is an out-of-bounds read in Hyper-V that enables a local attacker to execute code. Exploitation would be local with no user interaction and requires no privileges beyond those of the attacker, with a high impact on confidentiality, integri...

CVE-2026-45655

CVE-2026-45655 affects Windows BitLocker. The description indicates a protection mechanism failure that could allow an unauthorized attacker to bypass a security feature via a physical attack. The connected documents provide the following details: CVSSv3.1 base score 5.3 (Medium), attack vector P...

CVE-2025-48803

CVE-2025-48803 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is a missing integrity check in the Enclave, enabling an authorized local attacker to obtain elevated privileges. The NCSC aggregation also lists CVE-2025-48803 with an impact of gaining elevated privileges...

CVE-2025-49708

CVE-2025-49708: A use-after-free vulnerability in the Microsoft Graphics Component can allow an authorized attacker to elevate privileges over the network. Connected Microsoft security updates and advisories indicate this issue is addressed in October 2025 Windows updates (KBs referenced in KB506...

CVE-2026-26156

CVE-2026-26156 is a Windows Hyper-V heap-based buffer overflow that enables local code execution. The connected sources corroborate the vulnerability in Windows Hyper-V and indicate it has been fixed by Microsoft in security updates (e.g., KBs and advisories referenced in the sources). The Red Ha...

CVE-2026-40410

Technical details (affected component, root cause, affected versions, exploit vectors or fixes) are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2026-42837

CVE-2026-42837 describes a buffer over-read in the Windows Projected File System Filter Driver that allows an authenticated local attacker to elevate privileges. The affected component is the Windows Projected File System Filter Driver; root cause is a buffer over-read within the filter driver. T...

CVE-2026-42972

CVE-2026-42972 describes a Windows Hyper-V information disclosure vulnerability. The issue allows a locally authenticated attacker (low privileges) to disclose sensitive information due to exposure of information to an unauthorized actor. CVSS 3.1/Local, Low complexity, Privileges Low, Confidenti...

CVE-2026-59128

The CVE-2026-59128 entry documents an out-of-bounds read in Windows Encrypting File System (EFS) that can let an authorized local attacker disclose information. Affected component: Windows EFS. Root cause: out-of-bounds read leading to information disclosure. Impact: local disclosure of informati...

CVE-2026-59138

CVE-2026-59138 is a null pointer dereference in Microsoft Remote Registry Service that allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Lo...

CVE-2026-62880

Windows CVE-2026-62880 is an out-of-bounds read in Windows NTFS that enables an authorized local user to elevate privileges. Impact: local escalation of rights with high confidentiality/integrity/availability impact per the NVD metrics. The root cause is an out-of-bounds read in NTFS handling. Th...

CVE-2026-62892

CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...

CVE-2025-21331

CVE-2025-21331 is a Windows Installer Elevation of Privilege vulnerability. The connected documents confirm it is a local privilege escalation (attack vector: LOCAL, requires LOW privileges and USER interaction) with high impact (C:H/I:H/A:H) per CVSS 3.1. Public details in the NCSC advisory cate...

CVE-2025-29957

Technical details about CVE-2025-29957 (Windows Deployment Services) are not provided in the supplied documents. Please monitor for updated advisories from Microsoft or NVD for affected product/version, root cause, impact, and remediation.

CVE-2025-49689

Technical details for CVE-2025-49689 (affected product/component/impact) are not publicly available in the provided documents. Monitor for updates from official sources; no concrete vendor/version/exploit information is available here.

CVE-2025-59280

CVE-2025-59280 affects the Windows SMB Client and is described as an improper authentication vulnerability that allows an unauthorized attacker to tamper over the network. The CVSSv3.1 vector from the initial document is: AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N with a base score of 3.1 (Low). Connect...

CVE-2026-32071

CVE-2026-32071 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. The affected component is LSASS; the CVSS metrics indicate network-based exploitation with low complexity, no privileges or user interaction required, and an impact on availability (HIG...

CVE-2026-48574

CVE-2026-48574 is a Windows Media vulnerability described as a heap-based buffer overflow that allows an unauthorized attacker to execute code locally. The cited CVSS 3.1 vector (LOCAL, HIGH impact on confidentiality, integrity, and availability; user interaction required; no privileges required)...

CVE-2026-61347

CVE-2026-61347 describes a buffer over-read in Windows Event Logging Service that allows an authorized attacker with LOW privileges and local access to disclose information. The CVSS 3.1 metrics indicate a MEDIUM base score (5.5), with LOCAL attack vector, low attack complexity, no user interacti...

CVE-2026-61350

Windows NTFS contains a buffer over-read that can disclose information when an attacker performs a physical attack. Affected component: NTFS; root cause: buffer over-read. CVSSv3.1 metrics indicate AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N with base score 4.6 (Medium). Impact is limited to confidential...

CVE-2026-62696

CVE-2026-62696 impacts the Windows Program Compatibility Assistant Service. The advisory describes an integer underflow (wrap/wraparound) that allows an authorized local attacker to elevate privileges. CVSS: 3.1, Base score 7.8 (HIGH), with Local attack vector, Low attack complexity, Privileges r...

CVE-2026-65795

CVE-2026-65795: Windows DNS contains a local elevation of privileges issue. An authorized attacker can elevate privileges locally. CVSS v3.1 reflects LOCAL attack vector, HIGH confidentiality/integrity/availability impact, with HIGH privileges required and no user interaction. Exploitation detail...

CVE-2025-29832

Technical details about CVE-2025-29832 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are detailed here. Monitor for updates.

CVE-2025-50173

CVE-2025-50173 is a Windows Installer local privilege-escalation vulnerability caused by weak authentication that enables an authenticated, local attacker to elevate privileges. The CVE is documented with a CVSS v3.1 base score of 7.8 (Impact: High; Privileges Required: Low; Scope: Unchanged; Loc...

CVE-2025-54101

CVE-2025-54101: Use-after-free in Windows SMBv3 Client can lead to remote code execution by an authorized attacker over the network. The Connected documents confirm this SMBv3 Client issue and tie remediation to the September 2025 Windows updates that address SMB-related vulnerabilities (e.g., SM...