CVE-2026-20834

CVE-2026-20834 affects Windows Shell (Windows Shell component) with a spoofing impact described in the Windows Shell entry: ability to pretend to be another user (CVSS v3.1 base 4.6; AV:P, AC:L, PR:N, UI:N, S:U, C:H, I:N, A:N). Connected docs corroborate a Windows Shell vulnerability tied to CVE-...

CVE-2026-20867

CVE-2026-20867 describes a race-condition in Windows Management Services caused by concurrent execution over a shared resource with improper synchronization. This vulnerability enables a locally authenticated attacker to elevate privileges. The issue is addressed in Microsoft’s January 2026 secur...

CVE-2026-20869

CVE-2026-20869 affects Windows Local Session Manager (LSM) and is described as a race-condition vulnerability in the management of a shared resource that allows an authenticated, local attacker to elevate privileges. The initial CVE entry cites local privilege escalation with a high impact. Micro...

CVE-2026-20872

CVE-2026-20872 affects Windows NTLM: external control of a file name or path allows an attacker to spoof authentication over the network. The description states this vulnerability and related references indicate a Windows NTLM spoofing risk. The connected Nessus/NCSC/EUVD/NVD entries confirm the ...

CVE-2026-21244

CVE-2026-21244 affects Windows Hyper-V with a heap-based buffer overflow that enables local code execution by an authenticated attacker. The CVSS 3.1 vector ( LOCAL, LOW PR, LOW AC, USER INTERACTION REQUIRED, S: U ) indicates high impact to confidentiality, integrity, and availability if exploite...

CVE-2026-34343

CVE-2026-34343 describes a heap-based buffer overflow in Windows’ Application Identity (AppID) Subsystem that could enable local privilege escalation by an authorized attacker. Documented impact is local, with required privileges LOW and no user interaction, consistent with CVSS v3.1 base metrics...

CVE-2026-49783

CVE-2026-49783 is a Windows Secure Boot issue described as an improperly implemented security check for the standard, enabling a local attacker with low privileges to bypass a security feature. The CVSS v3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, no user interac...

CVE-2026-50318

CVE-2026-50318 affects the Windows Resilient File System (ReFS). It describes a stack-based buffer overflow that allows an authorized local attacker to elevate privileges. The CVSSv3.1 vector is LOCAL/LOW+LOW/LOW with no user interaction and implies high impact on confidentiality, integrity, and ...

CVE-2026-50346

CVE-2026-50346 is a Windows RPC Runtime-related elevation-of-privilege vulnerability (Netlogon RPC). The primary description indicates improper authorization that allows a locally authenticated attacker to escalate privileges. Public references include the NVD/NCSC entries and the Microsoft updat...

CVE-2026-50375

CVE-2026-50375 is a Windows DirectX Graphics Kernel elevation-of-privilege vulnerability. The issue stems from a heap-based buffer overflow in DirectX, allowing an authorized attacker to locally elevate privileges. Affected component: Windows DirectX/DirectX Graphics Kernel (dxgkrnl). Current doc...

CVE-2026-50394

CVE-2026-50394 is an information-disclosure vulnerability affecting Windows Media, enabling a locally-initiated disclosure of sensitive data to an authorized attacker. The incident is categorized as a local access issue with a CVSS v3.1 score of 5.5 (Medium) and a Confidentiality impact of High; ...

CVE-2026-50422

CVE-2026-50422 is a Windows NTFS vulnerability described as an out-of-bounds read that could let an authenticated, local attacker gain elevated privileges. Affected component: Windows NTFS (NTFS subsystem). Root cause: out-of-bounds read in NTFS code path. Impact: local privilege escalation and p...

CVE-2026-50450

CVE-2026-50450 describes a race condition in Windows Wireless Wide Area Network Service where concurrent execution on a shared resource with improper synchronization can allow an authenticated, local attacker to elevate privileges. The CVE is associated with a local exploit vector and a base CVSS...

CVE-2026-50453

CVE-2026-50453 affects the Windows USB Audio Class driver (usbaudio.sys). It is an out-of-bounds read vulnerability that may disclose information and requires physical access (attack vector: physical, base CVSS 6.1). Root cause: memory read past bounds. Impact: information disclosure with a physi...

CVE-2026-50477

CVE-2026-50477 is a Windows Kernel elevation-of-privilege vulnerability caused by a heap-based buffer overflow. The issue allows an authenticated local attacker to elevate privileges on affected systems. Public disclosures identify the vulnerability in the Windows Kernel, with CVSS v3.1 base scor...

CVE-2026-54122

CVE-2026-54122 describes a heap-based buffer overflow in Windows GDI+ that enables local code execution by an unauthenticated attacker. The vulnerability affects the Windows GDI+ component and is rated high (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 8.4). The available documents confirm the ...

CVE-2026-55003

CVE-2026-55003 affects Windows Remote Desktop Protocol (RDP). The vulnerability arises from a use of an uninitialized resource, enabling an unauthenticated attacker to disclose information over the network. The CVSS 3.1 Base score is 6.5 (Medium); attack vector: Network, privileges required: None...

CVE-2026-57083

CVE-2026-57083 : A vulnerability in the Windows Codecs Library (Windows Media Photo Codec) arises from use of an uninitialized resource, enabling a local attacker to disclose information. Documented impact is local information disclosure with a CVSS 3.1/5.5 (Local, Privileges NONE, User Interacti...

CVE-2026-62796

The CVE CVE-2026-62796 describes an out-of-bounds read in Windows NTFS that can let an authorized, low-privilege attacker disclose information locally. The defined attack vector is LOCAL with LOW complexity and no user interaction, and the impact is a confidentiality breach (information disclosed...

CVE-2026-62797

Technical details about CVE-2026-62797 are not publicly available in the provided documents. The descriptions only note a heap-based buffer overflow in Windows NTFS causing local privilege escalation. Monitor for updates.

CVE-2025-50159

CVE-2025-50159 : Use-after-free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS can enable an authorized local user to escalate privileges. CVSS v3.1 base score 7.3 (LOCAL, LOW complexity, LOW privileges, USER interaction required; confidentiality/integrity/availability High). Affected com...

CVE-2025-53721

Technical details are not publicly available in the provided connected documents. The CVE is described as a use-after-free in Windows Connected Devices Platform Service enabling local privilege elevation, but specifics (root cause, affected versions, exploit method, and fix) are not disclosed her...

CVE-2025-54098

Technical details about CVE-2025-54098 (Hyper-V local privilege elevation) are not provided in the connected documents. Monitor for future updates from Microsoft for affected products, impact, and mitigations.

CVE-2025-59278

CVE-2025-59278 affects Windows Authentication Methods and is tied to an improper validation of input type, enabling local privilege escalation for an authorized user. The CVE is rated with CVSS v3.1 base metrics around 7.8 (HIGH) by Microsoft/CNA sources, indicating a local, high-severity impact ...

CVE-2025-59289

CVE-2025-59289 concerns a double-free condition in Windows Bluetooth Service enabling a locally authenticated attacker to elevate privileges. Public sources within the provided documents confirm this CVE is associated with the Windows Bluetooth Service and is categorized with a high impact (local...

CVE-2025-62565

CVE-2025-62565 is a Windows Shell elevation-of-privilege vulnerability caused by a use-after-free in Windows Shell. A locally authenticated attacker can exploit it to elevate privileges; CVSSv3.1 base score 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and U...

CVE-2026-20828

CVE-2026-20828 is an out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS). The impact is information disclosure and requires physical access (attack vector: PHYSICAL; base score 4.6). Affected: Windows ICS component within Windows. Root cause: out-of-bounds read as descri...

CVE-2026-20865

CVE-2026-20865 is a Windows Management Services use-after-free vulnerability that enables an authenticated, local attacker to achieve elevated privileges. The issue arises from a prior use-after-free in the Windows Management Services component, with exploitation requiring local access and no use...

CVE-2026-21236

CVE-2026-21236 describes a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock (AFD) that enables an authenticated local attacker to obtain elevated privileges. The vulnerability is categorized as a local, privilege-escalation issue, with the affected component being t...

CVE-2026-25169

Technical details about CVE-2026-25169 are not provided in the supplied documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates.

CVE-2026-26169

CVE-2026-26169 is a Windows Kernel Memory information-disclosure vulnerability described as a buffer over-read that can leak information to an authorized local attacker. The CVE is listed across multiple feeds (NVD/NCSC/EUVD) with the impact described as local information disclosure and a high co...

CVE-2026-40408

CVE-2026-40408 is described as a use-after-free in Windows kernel-mode drivers that enables local privilege escalation for an authenticated attacker. The provided documents consistently state local elevation of privileges but do not specify the affected products, driver components, or vulnerable ...

CVE-2026-45594

CVE-2026-45594 : This vulnerability concerns the Windows Application Identity (AppID) Subsystem , where an exposure of sensitive information to an unauthorized actor enables a local attacker to disclose information. The NVD entry reiterates the issue as a local confidentiality breach (impact: Hig...

CVE-2026-49795

CVE-2026-49795 is a use-after-free in the Windows Kernel that allows an authorized local attacker to elevate privileges. Affected: Windows kernel code paths implementing kernel objects referenced after free. Root cause: use-after-free leads to arbitrary code execution with SYSTEM privileges; impa...

CVE-2026-50421

CVE-2026-50421 is a Windows vulnerability in Windows Connected User Experiences and Telemetry described as a local privilege escalation via a resource access type confusion. The CVE entry is supported by multiple records: NVD/NCSC/CIRCL indicate the issue and Microsoft has released updates to add...

CVE-2026-50686

CVE-2026-50686 is a Windows OLE remote code execution vulnerability caused by a type confusion in resource access. It enables network-exposed code execution without authentication and is documented with CVSS v3.1 base score 8.1 (High). Public references identify the affected area as Windows OLE, ...

CVE-2026-56182

CVE-2026-56182 is a Windows NTFS elevation-of-privilege vulnerability caused by an integer overflow/wraparound in NTFS operations that can be exploited by an authorized local attacker. Public sources in the connected data corroborate the root cause and the affected component is NTFS on Windows. T...

CVE-2026-58638

CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...

CVE-2025-50155

CVE-2025-50155 corresponds to a local privilege-escalation vulnerability in Windows Push Notifications. Affected component: Windows Push Notifications service. Root cause: access of a resource using an incompatible type (type confusion). Impact: authorized attacker on the same device can escalate...

CVE-2025-53134

Technical details about CVE-2025-53134 are not publicly disclosed in the provided Connected documents. Available sources confirm the vulnerability description only (race condition in Windows Ancillary Function Driver for WinSock with local privilege escalation). Monitor for updates.

CVE-2025-53154

CVE-2025-53154 concerns the Windows Ancillary Function Driver for WinSock and describes a null pointer dereference that enables a local, authorized user to achieve privilege escalation. The CVSSv3.1 metrics cited by Microsoft indicate a local attack vector, low attack complexity, and required pri...

CVE-2025-55685

CVE-2025-55685 is a use-after-free in Windows PrintWorkflowUserSvc that allows an authorized local attacker to elevate privileges. Affected software: Windows PrintWorkflowUserSvc component. Root cause: use-after-free in PrintWorkflowUserSvc (exact technical path not detailed in the provided docs)...

CVE-2025-58738

CVE-2025-58738 is a local-execution vulnerability caused by a use-after-free in Inbox COM Objects. Reported impact: unauthorized code execution on the affected system with local attacker access. Documented impact aligns with high-severity CVSS metrics (AV: Local, AC: High, PR: None, UI: Required;...

CVE-2025-59197

CVE-2025-59197 is a Windows ETL Channel vulnerability with a concrete technical detail: it arises from insertion of sensitive information into a log file, enabling an authorized attacker to disclose information locally. The connected documentation confirms this CVE is tied to the Windows ETL Chan...

CVE-2025-59208

CVE-2025-59208 is an out-of-bounds read in Windows MapUrlToZone that could allow an unauthenticated attacker to disclose information over a network. The description and connected documents confirm a network-based exposure affecting Windows, with the root cause being a memory read beyond bounds in...

CVE-2025-60709

Technical details (affected product/version, root cause, impact, exploit specifics) are not publicly provided in the given documents for CVE-2025-60709. Monitor for updates from Microsoft; no additional vulnerability specifics are available here.

CVE-2025-60720

Technical details for CVE-2025-60720 (TDX.sys) are not provided in the Connected documents. The Initial Description notes local privilege escalation via a buffer over-read; no vendor/version/patch details are supplied here; monitor for updates.

CVE-2025-62473

CVE-2025-62473 is a Windows RRAS information-disclosure vulnerability caused by a buffer over-read. It enables an unauthenticated attacker to disclose information over the network. Connected sources confirm affected component as Windows Routing and Remote Access Service (RRAS) and label the vulne...

CVE-2026-20832

CVE-2026-20832 is a Windows component vulnerability described as a Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege. Connected documents confirm the flaw affects the Windows RPC IDL handling, enabling local privilege escalation with high impact. The vulnera...

CVE-2026-20860

CVE-2026-20860 affects the Windows Ancillary Function Driver for WinSock and is a local privilege escalation via type confusion. Connected documents confirm the affected component and that exploitation requires local access with privileges already. Public details on exploit methods are not provid...