CVE-2026-20828

CVE-2026-20828 is an out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS). The impact is information disclosure and requires physical access (attack vector: PHYSICAL; base score 4.6). Affected: Windows ICS component within Windows. Root cause: out-of-bounds read as descri...

CVE-2026-20869

CVE-2026-20869 affects Windows Local Session Manager (LSM) and is described as a race-condition vulnerability in the management of a shared resource that allows an authenticated, local attacker to elevate privileges. The initial CVE entry cites local privilege escalation with a high impact. Micro...

CVE-2026-27930

CVE-2026-27930 is a Windows GDI information disclosure vulnerability. The CVSSv3.1 base score is 5.5 (Medium); attack is LOCAL, requires user interaction, and does not affect integrity or availability, but threatens confidentiality HIGH. The record notes an OFFICIAL_FIX remediation level, implyin...

CVE-2026-32225

CVE-2026-32225 pertains to a Windows Shell security feature bypass. The entry indicates a remote-accessible vulnerability with NETWORK attack vector, requiring user interaction, and impacts confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 8.8 (HIGH) with an Offi...

CVE-2026-34331

CVE-2026-34331 involves a race condition in the Windows Win32K GRFX subsystem caused by concurrent access to a shared resource with improper synchronization. This leads to local privilege escalation by an authorized attacker. The provided documents state the issue and impact but do not include ex...

CVE-2026-50341

CVE-2026-50341 is a Windows NTFS information-disclosure issue caused by a buffer over-read. The vulnerability allows an authorized local attacker to disclose information from memory. Public documentation in connected sources confirms the affected component as NTFS and describes a local-exploitati...

CVE-2026-50435

CVE-2026-50435 (Windows Overlay Filter): A buffer over-read in the Windows Overlay Filter enables a locally authenticated attacker to elevate privileges. The exploitation context is local with low attack complexity and no user interaction, and the impact is elevation of privileges with high confi...

CVE-2026-50437

CVE-2026-50437 describes an out-of-bounds read in Windows DWM Core Library that could allow an authenticated local attacker to disclose information. Public docs identify the affected component (Windows DWM Core Library) and the impact (local information disclosure) with a CVSSv3.1 base score of 5...

CVE-2026-50695

CVE-2026-50695 refers to a stack-based buffer overflow in Microsoft Windows Active Directory Federation Services (AD FS) that enables an unauthenticated, remote attacker to cause a denial of service over the network. The vulnerability is described with a CVSS v3.1 base score of 7.5 (HIGH) with at...

CVE-2026-54107

The CVE-2026-54107 entry documents a race condition caused by improper synchronization in Windows Win32K, enabling a locally authenticated attacker to achieve privilege escalation. Affected software/component: Windows Win32K. Root cause: concurrent execution with shared resource lacking proper sy...

CVE-2026-56176

CVE-2026-56176 – Windows Win32K GRFX: Affected component is the Win32K GRFX subsystem. The vulnerability is an out-of-bounds read that allows an authorized local attacker to elevate privileges on Windows. The CVE is backed by multiple sources in connected documents (NVD/NCSC and MS advisories) co...

CVE-2026-58628

CVE-2026-58628 affects Windows Wireless Networking and is described as a race condition in concurrent access to a shared resource, allowing an authenticated local attacker to elevate privileges. The underlying issue is improper synchronization that leads to elevation of privileges on Windows syst...

CVE-2026-62796

The CVE CVE-2026-62796 describes an out-of-bounds read in Windows NTFS that can let an authorized, low-privilege attacker disclose information locally. The defined attack vector is LOCAL with LOW complexity and no user interaction, and the impact is a confidentiality breach (information disclosed...

CVE-2026-69463

CVE-2026-69463 is a heap-based buffer overflow in the Windows NTFS filesystem component that allows an unauthorized attacker to achieve remote code execution over a network without requiring prior authentication or user interaction. The vulnerability is rated CVSS 3.1: 9.8 (Critical) by the CNA (...

CVE-2025-58714

CVE-2025-58714 is an elevation-of-privilege issue in the Windows Ancillary Function Driver for WinSock caused by improper access control. The description indicates an authorized attacker could locally elevate privileges. Connected Microsoft advisories (KB/OS update pages) show this CVE among Wind...

CVE-2025-59255

CVE-2025-59255 is a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. Connected documents confirm the affected component (Windows DWM Core Library) and the local privilege escalation impact but do not provide explicit exp...

CVE-2025-59289

CVE-2025-59289 concerns a double-free condition in Windows Bluetooth Service enabling a locally authenticated attacker to elevate privileges. Public sources within the provided documents confirm this CVE is associated with the Windows Bluetooth Service and is categorized with a high impact (local...

CVE-2025-60704

Technical details about CVE-2025-60704 are not publicly provided in the supplied Connected Documents. The initial description notes a Kerberos cryptographic step missing that could enable network-based privilege elevation, but no vendor/version/impact specifics are disclosed here. Monitor for upd...

CVE-2025-60720

Technical details for CVE-2025-60720 (TDX.sys) are not provided in the Connected documents. The Initial Description notes local privilege escalation via a buffer over-read; no vendor/version/patch details are supplied here; monitor for updates.

CVE-2026-20825

CVE-2026-20825 is a Windows Hyper-V information-disclosure vulnerability described as “improper access control” that can allow an authorized local attacker to disclose information. The CVE is rated with local attack vector, high privilege requirement, and high confidentiality impact (CVSS: 4.4, M...

CVE-2026-20832

CVE-2026-20832 is a Windows component vulnerability described as a Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege. Connected documents confirm the flaw affects the Windows RPC IDL handling, enabling local privilege escalation with high impact. The vulnera...

CVE-2026-32070

CVE-2026-32070 affects Windows where the Common Log File System Driver contains an elevation-of-privilege flaw. The root cause is not explicitly described in the provided text, but the CVSS 3.1 metrics indicate a local attack vector with high impact on confidentiality, integrity, and availability...

CVE-2026-45596

The CVE-2026-45596 entry concerns a use-after-free in the Windows Ancillary Function Driver for WinSock, leading to local privilege elevation. Affected component/function is the Windows AFD for WinSock; root cause is a use-after-free condition that can be exploited by an authorized local attacker...

CVE-2026-50311

CVE-2026-50311 concerns Windows Server where improper access control allows an authorized user to locally elevate privileges. Root cause: insufficient authorization checks in the affected Windows Server components, enabling privilege escalation with local access and no user interaction required. ...

CVE-2026-50358

CVE-2026-50358 is a Windows Media use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Affected component: Windows Media. Root cause: use-after-free in Windows Media code path. Impact: local privilege escalation with high severity as per Microsoft guid...

CVE-2026-50390

CVE-2026-50390 is a Windows Kernel elevation-of-privilege in which an authorized attacker can gain local privileges through a type-confusion vulnerability (incompatible resource type). The CVE is documented with a CVSSv3.1 vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, BASE SCORE 7.0 (HIGH). Affe...

CVE-2026-50445

CVE-2026-50445 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by a buffer over-read. An unauthenticated, remote attacker could disclose memory information over the network. Microsoft and partners have released updates (MSRC guidance) to address this vulnera...

CVE-2026-50476

Microsoft Windows CVE-2026-50476 is a local privilege-escalation vulnerability in the Windows Network Connections Service caused by a use-after-free. Affected component is the Windows Network Connections Service; root cause is a use-after-free condition that enables an authorized attacker to elev...

CVE-2026-50673

CVE-2026-50673 is a Windows Kernel elevation-of-privilege vulnerability caused by a null pointer dereference. The issue allows an authorized attacker to elevate privileges locally. Public sources confirm details across NVD, MSRC, EUVD, and related advisories, with a CVSSv3.1 vector of LOCAL, HIGH...

CVE-2026-50692

CVE-2026-50692 is a Windows vulnerability in Desktop Window Manager (DWM): a heap-based buffer overflow that enables local privilege escalation by an authorized, low-privilege user with no user interaction. Public sources confirm the issue and Microsoft has released updates to address it; affecte...

CVE-2026-57982

CVE-2026-57982 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by the use of an uninitialized resource. An authenticated attacker could disclose information over the network. Public details identify the affected component as Windows RDP/RDP client-server int...

CVE-2026-62725

CVE-2026-62725 describes a use-after-free in the Windows Telephony Service that can allow a locally authenticated user to elevate privileges. The NVD/CVE records indicate an elevated-privilege, local-execution risk with a CVSS v3.1 base score of 7.0 (high) and impact on confidentiality, integrity...

CVE-2025-48813

Technical details (affected product, versions, root cause, exploitability, fixes) for CVE-2025-48813 are not provided in the supplied connected documents. Monitor for updates from Microsoft and CVE databases to confirm scope, impact, and remediation.

CVE-2025-50152

CVE-2025-50152 is a Windows Kernel vulnerability (Out-of-bounds read) that could enable an authorized local attacker to elevate privileges. The initial record lists the CVE with a CVSS v3.1 base score of 7.8 (HIGH) and LOCAL attack vector/low complexity, with no exploitation details. Connected do...

CVE-2025-53134

Technical details about CVE-2025-53134 are not publicly disclosed in the provided Connected documents. Available sources confirm the vulnerability description only (race condition in Windows Ancillary Function Driver for WinSock with local privilege escalation). Monitor for updates.

CVE-2025-53151

CVE-2025-53151 is a Windows Kernel use-after-free local privilege escalation vulnerability. Connected sources indicate the affected component is the Windows Kernel and that exploitation leads to obtaining elevated privileges locally. Microsoft security updates are referenced in the surrounding ad...

CVE-2025-53716

CVE-2025-53716 is a Denial-of-Service vulnerability due to a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS). The CVE description states an authorized attacker can trigger a network-based DoS without user interaction, with attack vector NETWORK and impact Av...

CVE-2025-53721

Technical details are not publicly available in the provided connected documents. The CVE is described as a use-after-free in Windows Connected Devices Platform Service enabling local privilege elevation, but specifics (root cause, affected versions, exploit method, and fix) are not disclosed her...

CVE-2025-54091

Technical details for CVE-2025-54091 are not publicly provided in the connected documents. The initial description notes a local privilege elevation via Hyper-V, but no specific root cause, affected products, or fixes are given here. Monitor for updates.

CVE-2025-55325

CVE-2025-55325 is a Buffer over-read in the Windows Storage Management Provider that enables an attacker with local access to disclose information. The CVE entry lists a CVSS v3.1 base score of 5.5 (Medium) with local attack vector and low attack complexity; confidentiality impact is High, others...

CVE-2025-55333

CVE-2025-55333 describes an authentication bypass in Windows BitLocker caused by an incomplete factor comparison, enabling a physical attacker to bypass a security feature. The initial entry notes exploitation status as null and does not specify affected product versions beyond Windows BitLocker;...

CVE-2025-58719

CVE-2025-58719 affects the Connected Devices Platform Service (Cdpsvc) in Windows. The issue is a use-after-free vulnerability that could allow an authorized local attacker to achieve privilege elevation. The connected documents confirm the vulnerability and its local impact, but do not provide e...

CVE-2025-59203

CVE-2025-59203 affects the Windows StateRepository API. The issue is described as an insertion of sensitive information into a log file, enabling local disclosure by an authenticated attacker with local access. The CVSS v3.1 base score is 5.5 (Medium) with Local attack vector and Low attack compl...

CVE-2025-62473

CVE-2025-62473 is a Windows RRAS information-disclosure vulnerability caused by a buffer over-read. It enables an unauthenticated attacker to disclose information over the network. Connected sources confirm affected component as Windows Routing and Remote Access Service (RRAS) and label the vulne...

CVE-2026-24292

CVE-2026-24292 is a Windows vulnerability in the Connected Devices Platform Service (Cdpsvc) described as a use-after-free that enables local privilege escalation for an authenticated, non-user interaction scenario. Connected documents corroborate the issue with Cdpsvc and list the CVE-2026-24292...

CVE-2026-26160

CVE-2026-26160 affects the Windows Remote Desktop Licensing Service. The issue arises from missing authentication for a critical function, enabling an authorized local attacker to elevate privileges on affected systems. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, lo...

CVE-2026-32085

CVE-2026-32085 affects Windows Remote Procedure Call and corresponds to an information-disclosure vulnerability that can allow an authenticated local attacker to read sensitive data. The NVD/NCSC/MSRC entries confirm this vulnerability and note that Microsoft has released updates to fix the issue...

CVE-2026-50374

CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...

CVE-2026-50410

CVE-2026-50410 is a Windows Runtime use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. Multiple connected sources confirm the issue affecting Windows Runtime and describe local privilege escalation as the impact, with CVSS v3.1 score of 7.0 (HIGH) and L...

CVE-2026-50457

CVE-2026-50457 (Windows Runtime) is a local elevation of privileges vulnerability caused by a use-after-free in Windows Runtime. An authorized attacker could exploit this to gain higher privileges on the system. The entry is corroborated by multiple sources (NVD/NCSC/Circl) and Microsoft has rele...