CVE-2026-56194

CVE-2026-56194 : Heap-based buffer overflow in Windows Network File System (NFS) can allow an authorized attacker to elevate privileges over a network. Affected component is Windows NFS Server; root cause described as a heap-based overflow in the NFS networking path. The CVE entry indicates privi...

CVE-2025-59259

CVE-2025-59259 affects Windows Local Session Manager (LSM) with an improper validation of input type, enabling an unauthenticated? authorized user to cause Denial of Service over a network. According to the CVE description and EUVD-2025-34370, the exploitability is network-based (AV:N, AC:L, PR:L...

CVE-2025-59290

CVE-2025-59290 is a local privilege escalation caused by a use-after-free in Windows Bluetooth Service. Affected component: Windows Bluetooth Service. Root cause: use-after-free. Impact: an authorized attacker can elevate privileges locally. Exploitation status is not specified in the provided do...

CVE-2025-60720

Technical details for CVE-2025-60720 (TDX.sys) are not provided in the Connected documents. The Initial Description notes local privilege escalation via a buffer over-read; no vendor/version/patch details are supplied here; monitor for updates.

CVE-2025-62452

Technical details about CVE-2025-62452 (heap-based buffer overflow in RRAS) are not publicly provided in the supplied documents. The connected KB/MS documents do not specify affected products/versions, exploit details, or mitigations. Monitor for updates.

CVE-2026-20925

CVE-2026-20925 affects Windows NTLM and is described as an external control of the file name or path that enables spoofing (pretend to be another user) over a network. The vulnerability is assigned a CVSS v3.1 base score of 6.5 (Medium) with network attack vector and required user interaction. Co...

CVE-2026-21240

CVE-2026-21240 describes a local, authenticated TOCTOU race in Windows HTTP.sys that can allow privilege escalation. Affected component: Windows HTTP.sys. Root cause: time-of-check/time-of-use race condition. Impact: high (local escalation of privileges, potential confidentiality, integrity, and ...

CVE-2026-26175

CVE-2026-26175 : Windows Boot Manager security feature bypass via use of an uninitialized resource, enabling a physical attacker to bypass protection. Affected component: Windows Boot Manager; root cause: uninitialized resource handling. Base CVSS 3.1 score 4.6 (PHYSICAL attack, LOW attack comple...

CVE-2026-32088

CVE-2026-32088 describes a security feature bypass in the Windows Biometric Service. Affected component: Windows Biometric Framework service on Windows. The underlying root cause is not explicitly detailed in the provided documents. CVSS metrics indicate an attacker with physical access can explo...

CVE-2026-32155

CVE-2026-32155 – Desktop Window Manager Use-After-Free : A security issue in Windows Desktop Window Manager allows an authenticated local attacker to achieve elevation of privilege via a use-after-free condition. The vulnerability is described as a local, post-authentication privilege escalation ...

CVE-2026-32160

CVE-2026-32160 is a Windows Push Notifications Elevation of Privilege vulnerability. The CVSSv3.1 score is 7.8 (HIGH), with local, high-impact access and no user interaction. Exploit code maturity is UNPROVEN; remediation is an official fix per Microsoft. References point to the Microsoft update ...

CVE-2026-34328

CVE-2026-34328 describes an information-disclosure issue in Windows Audio Service, allowing a local attacker with low privileges to disclose sensitive information. Affected: Windows Audio Service (Windows). Root cause details are not provided beyond the high-level description. CVSS v3.1 base scor...

CVE-2026-50312

CVE-2026-50312 is a Windows Ancillary Function Driver for WinSock use-after-free vulnerability that enables local privilege escalation when exploited. The initial description and connected sources confirm the affected component and root cause, and indicate the impact is elevation of privileges fo...

CVE-2026-50341

CVE-2026-50341 is a Windows NTFS information-disclosure issue caused by a buffer over-read. The vulnerability allows an authorized local attacker to disclose information from memory. Public documentation in connected sources confirms the affected component as NTFS and describes a local-exploitati...

CVE-2026-50378

CVE-2026-50378 is a Windows Key Guard elevation-of-privilege vulnerability caused by a race condition in a shared resource that allows a local attacker to elevate privileges. The connected sources confirm the issue and that Microsoft released updates (e.g., KB5101649 and MSRC advisories) to addre...

CVE-2026-57976

The CVE-2026-57976 entry concerns Windows Active Directory Domain Services and is triggered by a null pointer dereference that can cause a denial of service over the network by an authorized attacker. The NVD entry corroborates a CVSS v3.1 base score of 6.5 (Medium), with NETWORK attack vector, L...

CVE-2026-58541

CVE-2026-58541 — Windows DWM Core Library Elevation of Privilege due to a type confusion in DWM. Affected component: Windows DWM Core Library/DWM (Windows OS). Description from sources: Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to e...

CVE-2025-53143

CVE-2025-53143 is listed for Windows Message Queuing with high impact (CVSS 3.1: 8.8, Network, Privileges Low, User Interaction None). The entry indicates a remote code execution potential via resource type confusion. Connected sources confirm the vulnerability exists in MSMQ and note a network-e...

CVE-2025-53807

CVE-2025-53807 describes a race condition in the Microsoft Graphics Component that allows local privilege escalation. The NCSC document confirms CVE-2025-53807 under Windows-related vulnerabilities. The CVSS3.1 vector from the initial document indicates a Local attack vector, High impact on confi...

CVE-2025-53810

CVE-2025-53810 describes a type confusion vulnerability in Windows Defender Firewall Service that allows an authorized local attacker to escalate privileges. The connected NC SC/ENISA-style document confirms the affected component as Windows Defender Firewall Service and lists the impact as obtai...

CVE-2025-58734

CVE-2025-58734 is described as a use-after-free vulnerability in the Windows Inbox COM Objects that can allow a local attacker to achieve arbitrary code execution. The connected document from CNVD confirms that Inbox COM Objects contain a code execution vulnerability, supporting the CVE’s impact ...

CVE-2025-59195

CVE-2025-59195 describes a race condition in the Microsoft Graphics Component caused by concurrent execution on a shared resource, enabling an authorized attacker to cause a local Denial of Service. The connected documents confirm the vulnerability in the Graphics Component and note that updates ...

CVE-2025-62458

CVE-2025-62458 is a Windows Win32K GRFX elevation-of-privilege vulnerability (heap-based overflow) that enables local privilege escalation by an authorized user. Connected sources confirm the issue is associated with Windows Win32K GRFX components and is part of Microsoft’s December 2025 patch cy...

CVE-2025-62461

CVE-2025-62461 is a Windows Projected File System Filter Driver elevation-of-privilege vulnerability caused by a buffer over-read. It allows an authorized local attacker to elevate privileges. Public sources (NCSC/NVD-style listings) assign a CVSS v3.1 base score of 7.8 (High) with Local attack v...

CVE-2026-20825

CVE-2026-20825 is a Windows Hyper-V information-disclosure vulnerability described as “improper access control” that can allow an authorized local attacker to disclose information. The CVE is rated with local attack vector, high privilege requirement, and high confidentiality impact (CVSS: 4.4, M...

CVE-2026-20929

CVE-2026-20929 concerns Windows HTTP.sys. The vulnerability is described as improper access control that could allow an authorized attacker to elevate privileges over the network. The connected documents corroborate Windows HTTP.sys involvement and list CVSS about 7.5–7.5+ with impact: obtaining ...

CVE-2026-25185

Technical details (affected products, components, root cause, impact, and remediation) are not provided in the supplied documents. Monitor for updates.

CVE-2026-32212

CVE-2026-32212 refers to a Universal Plug and Play information disclosure in upnp.dll. The CVSSv3.1 base score is 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction. Impact is confined to confidentiality (HIGH) with no integrity/availabi...

CVE-2026-49167

CVE-2026-49167 is a Windows Kernel use-after-free vulnerability enabling local privilege escalation by an authorized attacker. Affected component: Windows Kernel. Root cause: use-after-free in kernel code leading to elevation of privileges. Impact: local elevation with high confidentiality/integr...

CVE-2026-49804

CVE-2026-49804 describes a heap-based buffer overflow in the Windows USB Video Driver that can allow an unauthorized attacker to elevate privileges via a physical attack. The vulnerability is characterized by a physical attack vector with low exploit complexity and the need for user interaction, ...

CVE-2026-50303

CVE-2026-50303 describes a vulnerability in Windows Key Guard where use of a cryptographic primitive with a risky implementation enables an authorized local attacker to bypass a security feature. Affected component: Windows Key Guard cryptographic handling; root cause: risky implementation of the...

CVE-2026-50308

CVE-2026-50308 is a Windows NTFS vulnerability described as an integer underflow (wrap or wraparound) that could allow an unauthorized attacker to execute code locally. Sources consistently state: affected component is Windows NTFS on Windows systems; impact is local code execution with high seve...

CVE-2026-50389

CVE-2026-50389 affects Windows File Explorer and is a local information-disclosure vulnerability where an authorized attacker can disclose sensitive information. The issue is confirmed in Windows File Explorer (Explorer.exe) and is addressed by Microsoft security updates; multiple MSRC/MSKB entri...

CVE-2026-50456

CVE-2026-50456 is a Windows File Explorer information disclosure vulnerability. A local attacker with low privileges and no user interaction can access sensitive information due to the underlying issue in Windows File Explorer. The CVSS.3.1 score is 5.5 (Medium), with attack vector Local, impact...

CVE-2026-50695

CVE-2026-50695 refers to a stack-based buffer overflow in Microsoft Windows Active Directory Federation Services (AD FS) that enables an unauthenticated, remote attacker to cause a denial of service over the network. The vulnerability is described with a CVSS v3.1 base score of 7.5 (HIGH) with at...

CVE-2026-54129

Technical details (affected product/version, root cause, exploit vector, and remediation) are not provided in the supplied documents. Monitor for updates.

CVE-2026-54995

CVE-2026-54995 refers to a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST). The flaw could allow an unauthenticated attacker to execute arbitrary code over the network. Public references in the provided docs (NVD, MSRC update guidance, and patch reviews) c...

CVE-2025-53131

CVE-2025-53131 is a heap-based buffer overflow in Windows Media that could allow an unauthenticated attacker to execute code over the network. The Connected documents show Windows security updates in August 2025 (and related servicing stack updates) addressing Windows Media and other components, ...

CVE-2025-58732

CVE-2025-58732 is described as a use-after-free in Inbox COM Objects that enables local code execution. The Connected Documents provide broader Windows security updates (KBs and advisories) but do not specify a vendor/product remediation or a patch explicit to this CVE in the provided materials. ...

CVE-2025-58735

CVE-2025-58735 is a Use-after-free vulnerability in Inbox COM Objects leading to local code execution. The base CVSS v3.1 score is 7.0 (HIGH) with LOCAL attackVector, HIGH impact on confidentiality/integrity/availability, and user interaction required. Connected MSKB/NCSC entries confirm a Window...

CVE-2025-59207

CVE-2025-59207 is an elevation-of-privilege vulnerability in the Windows Kernel caused by an untrusted pointer dereference, enabling a locally authenticated attacker to elevate privileges. The Initial Description confirms the vulnerability type and impact. The Connected Documents provide Windows-...

CVE-2025-59512

Technical details about CVE-2025-59512, including affected product, root cause, exploitability or remediation, are not publicly provided in the supplied Connected Documents. Monitor for official updates (mitigations/patches) as newer MSKBs may cover this CVE.

CVE-2025-62219

CVE-2025-62219 is a local elevation-of-privilege in the Microsoft Wireless Provisioning System caused by a double-free error. The public descriptions in the connected documents confirm the vulnerability exists and that it enables an authorized attacker to elevate privileges on affected Windows pl...

CVE-2025-62464

CVE-2025-62464 is a Windows Projected File System Elevation of Privilege vulnerability (buffer over-read) that could allow an authorized local attacker to gain higher privileges. Affected product: Windows Projected File System (ProjFS) components; root cause described as a buffer over-read in Pro...

CVE-2026-20826

CVE-2026-20826 describes a race-condition in the Tablet Windows User Interface (TWINUI) Subsystem. The initial entry asserts an information disclosure/elevation of privileges vector via concurrent access to a shared resource, enabling an authorized attacker to elevate privileges locally. Microsof...

CVE-2026-20836

CVE-2026-20836 is a Windows graphics kernel vulnerability where a race condition in a shared resource allows local privilege elevation. The issue stems from concurrent execution with improper synchronization in the Graphics Kernel. The impact is local privilege escalation (C:H/I:H/A:H per CVSS 3....

CVE-2026-20843

CVE-2026-20843 describes an Elevation of Privilege in Windows Routing and Remote Access Service (RRAS) due to improper access control. The CVE is confirmed by multiple feeds; affected is RRAS on Windows. The reported impact is local privilege escalation for an authorized attacker with low privile...

CVE-2026-20869

CVE-2026-20869 affects Windows Local Session Manager (LSM) and is described as a race-condition vulnerability in the management of a shared resource that allows an authenticated, local attacker to elevate privileges. The initial CVE entry cites local privilege escalation with a high impact. Micro...

CVE-2026-20877

CVE-2026-20877 is a use-after-free vulnerability in Windows Management Services that enables a locally authenticated attacker to elevate privileges. The NVD entry specifies a CVSS v3.1 base score of 7.8 (AV: Local, AC: High, PR: Low, UI: None, S: Changed, C/I/A: High). Connected documents referen...

CVE-2026-20937

CVE-2026-20937 affects Windows File Explorer and is described as an information-disclosure vulnerability allowing a locally authorized attacker to disclose information. The provided documents confirm a Windows File Explorer exposure, with CVSS 3.1/5.5 (Local access, Low attack complexity, High co...