CVE-2026-61346

CVE-2026-61346 describes a use-after-free in the Windows Graphics Kernel that can allow an authorized local attacker to elevate privileges. The available documents confirm the vulnerable component is the Windows Graphics Kernel and indicate a local, high-impact risk (CVSSv3.1: AV=L/AC=H/PR=L/UI=N...

CVE-2024-43525

CVE-2024-43525 refers to a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 6.8 (Medium) with an attack vector of Physical, requiring no privileges and no user interaction, and impacting confidentiality, integrity, and availability...

CVE-2024-43646

Technical details are not publicly provided in the supplied documents. Monitor for updates from Microsoft/Microsoft Security Update Guide and NVD.

CVE-2025-32713

CVE-2025-32713 corresponds to a heap-based buffer overflow in Windows Common Log File System Driver that enables local privilege escalation for an authorized attacker. The connected sources identify the affected component as the Windows Common Log File System Driver and list the impact as obtaini...

CVE-2025-33066

CVE-2025-33066 is associated with Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2025-33066 under RRAS with an impact of “Execute Random Code” and a network-exploitable vector, indicating a heap-based buffer overflow that could allow remote code execution....

CVE-2025-49734

CVE-2025-49734 affects Windows PowerShell. The root cause is an improper restriction of the communication channel to intended endpoints, enabling an authorized local attacker to elevate privileges. The CVE maps to a local privilege escalation with high impact (C:H/I:H/A:H) and requires local acce...

CVE-2026-34337

CVE-2026-34337 describes a local privilege escalation via a use-after-free in the Windows Cloud Files Mini Filter Driver. An authorized attacker could elevate privileges locally (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). The connected documents confirm the vulnerability descripti...

CVE-2026-42825

CVE-2026-42825 describes a use-after-free in Windows Telephony Service that allows an authorized attacker to elevate privileges locally. The description clearly states local privilege escalation as the impact, but the connected documents do not provide specifics on affected product versions, root...

CVE-2026-61928

An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...

CVE-2026-34329

CVE-2026-34329 is a heap-based buffer overflow in Windows Message Queuing (MSMQ) that could allow an unauthenticated attacker to execute code over an adjacent network. Public details in provided connected documents describe MSMQ as affected and classify the vulnerability as remote code execution;...

CVE-2026-42900

The CVE-2026-42900 entry concerns a race condition caused by improper synchronization in the Windows App Store. Reported impact is privilege elevation over a network, implying an unauthorized attacker could exploit a timing-related flaw to escalate access. Documents consistently describe a concur...

CVE-2026-59125

Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...

CVE-2026-61918

CVE-2026-61918 is a Windows Remote Desktop Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The issue is confirmed in public CVE listings and is associated with the Remote Desktop Client componen...

CVE-2025-21257

CVE-2025-21257 corresponds to Windows WLAN AutoConfig Service Information Disclosure Vulnerability. The connected documents identify the affected component as the Windows WLAN AutoConfig Service and describe the issue as an information disclosure vulnerability, with local attack requirements (Loc...

CVE-2025-29829

Technical details about CVE-2025-29829 are not provided in the supplied documents. Monitor official updates from Microsoft/NVD for affected products, impact, and mitigations.

CVE-2025-49724

CVE-2025-49724 is a Use-After-Free vulnerability in Windows Connected Devices Platform Service that can lead to remote code execution over the network. According to initial data, impact is high (C/H/I/A) with CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U. Connected documents confirm the vulnerability exists ...

CVE-2025-59295

CVE-2025-59295 is a heap-based buffer overflow in Internet Explorer that could allow an unauthenticated attacker to execute code remotely over the network (CVSS 3.1/8.8). The connected MSKB guidance and advisories indicate Windows security updates addressing this class of issue; apply the latest ...

CVE-2026-32149

CVE-2026-32149 is a Windows Hyper-V remote code execution vulnerability. The issue involves a local attack vector (AV: Local) with low attack complexity (AC: Low) and privileges required (PR: Low) that requires user interaction (UI: Required). Impact is high on confidentiality, integrity, and ava...

CVE-2026-33835

Technical details about CVE-2026-33835 are not publicly provided in the connected documents. The initial description notes a use-after-free in Windows Cloud Files Mini Filter Driver with local privilege elevation, but no vendor/product/version specifics or fix details are included here. Monitor f...

CVE-2026-47653

CVE-2026-47653 describes a heap-based buffer overflow in the Remote Desktop Client that enables code execution over a network. Affected component is the Remote Desktop Client; the issue is caused by a memory-unsafe condition leading to potential arbitrary code execution. CVSS v3.1 metrics assign ...

CVE-2026-50500

CVE-2026-50500 is a Windows Netlogon use-after-free vulnerability allowing an authenticated attacker to elevate privileges over the network. The affected component is Windows Netlogon; impact is elevation of privileges (CVE-2026-50500, CVSS 7.5). Connected sources reference Microsoft advisories a...

CVE-2026-54984

Windows Imaging Component contains a heap-based buffer overflow that allows an unauthenticated user with local access to execute arbitrary code. This CVE-2026-54984 is described as a local, high-severity issue (CVSS 7.8). The documents provide no exploit details or remediation guidance; refer to ...

CVE-2026-56174

The CVE-2026-56174 entry describes an elevation of privilege in Windows Narrator Braille caused by an untrusted search path. An authorized local attacker can exploit this to gain higher privileges. CVSS:3.1 base score 7.8 (HIGH); attack vector LOCAL; privileges required LOW; user interaction NONE...

CVE-2026-62735

CVE-2026-62735 is a Windows HTTP.sys vulnerability described as a heap-based buffer overflow that enables an authorized, locally interacting attacker to elevate privileges. Evidence across sources confirms a local-exploit path with high impact (C/H/I/A), CVSS 3.1 vector: LOCAL, LOW complexity, LO...

CVE-2026-70330

CVE-2026-70330 is a heap-based buffer overflow in the Windows DNS service that allows an authorized attacker to elevate privileges locally . NVD assigns a CVSS 3.1 score of 7.8 (HIGH) with low privileges required, while Microsoft's CNA score is 6.7 (MEDIUM) requiring high privileges. CISA SSVC as...

CVE-2024-43536

CVE-2024-43536 affects the Windows Mobile Broadband driver and enables remote code execution through the driver component (execute random code). The CVSS vector from the initial data shows physical attack vector, no user interaction, and no privileges required, with high impact to confidentiality...

CVE-2024-43542

CVE-2024-43542 affects the Windows Mobile Broadband Driver. The vulnerability is described as a Denial-of-Service issue (impact: Availability) with an adjacent attacker and low attack complexity; no root-cause details are provided in the supplied documents. Mitigation/fix: Microsoft has released ...

CVE-2024-49107

Technical details, affected components, and remediation specifics for CVE-2024-49107 are not provided in the supplied connected documents. Monitor for official updates from Microsoft and CVE listings for concrete technical description, impact, and fixes.

CVE-2025-33061

CVE-2025-33061 is a Windows Storage Management Provider vulnerability characterized by an out-of-bounds read that could allow an authorized local attacker to disclose information. The CVE affects the Storage Management component and is rated with LOCAL attack vector and LOW privileges required, w...

CVE-2025-47971

CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...

CVE-2025-48800

CVE-2025-48800 affects Windows BitLocker. Description confirms a protection mechanism failure that enables bypass of BitLocker with physical access. Connected NC SC advisory lists Windows BitLocker under CVE-2025-48800 with a CVSS v3.1 impact of 6.80 (Physical access required, no user interaction...

CVE-2025-49743

CVE-2025-49743 is a local privilege-escalation vulnerability in the Microsoft Graphics Component caused by a race condition due to improper synchronization when a shared resource is accessed concurrently. The issue affects Windows graphics-related code paths and can let an authorized, local attac...

CVE-2026-23669

CVE-2026-23669 is a Windows Print Spooler remote code execution vulnerability with CVSS 3.1 base score 8.8 (Network, Low attack complexity, Low privileges required, No user interaction). It impacts confidentiality, integrity, and availability (all HIGH). Exploit code maturity is UNPROVEN. The Mic...

CVE-2026-24291

CVE-2026-24291 affects Windows Accessibility Infrastructure (ATBroker.exe). It is an Elevation of Privilege vulnerability with local attack vector, require low privileges and no user interaction, and it impacts confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remed...

CVE-2026-34346

CVE-2026-34346 concerns the Windows Ancillary Function Driver for WinSock. The vulnerability enables an authorized, local attacker to disclose sensitive information due to cleartext transmission of data. The available records (NVD/NVD entry and CVE listing) describe the affected component and the...

CVE-2026-50452

CVE-2026-50452 (Windows Runtime) describes a race condition in Windows Runtime due to improper synchronization on a shared resource. This concurrency flaw can allow an unauthenticated, remote attacker to elevate privileges over the network. The CVE is associated with a high base score (7.0) and n...

CVE-2026-50502

CVE-2026-50502 corresponds to a Windows Event Logging Service remote code execution vulnerability. The issue is described as insufficient granularity of access control in the Event Logging Service, enabling an authenticated, network-accessing attacker to run code on the vulnerable system. For con...

CVE-2026-62888

Summary: CVE-2026-62888 is a Windows vulnerability described as a use-after-free in the Windows DWM Core Library that enables a locally authenticated attacker to elevate privileges. The CVSSv3.1 base metrics indicate a high impact (C/H, I/H, A/H) with local attack vector, low attack complexity, a...

CVE-2024-43538

CVE-2024-43538 affects the Windows Mobile Broadband Driver and is categorized as a Denial-of-Service vulnerability. The connected documents confirm the vulnerability and indicate that Microsoft has published updates related to Windows vulnerabilities, but they do not provide a specific patch deta...

CVE-2025-21248

CVE-2025-21248 is a Windows Telephony Service Remote Code Execution vulnerability. The initial and connected documents confirm affected software: Windows Telephony Service component, with exploitable path over the network and required user interaction. CVSS v3.1 base score 8.8 (HIGH), with full i...

CVE-2025-29836

Technical details for CVE-2025-29836 (e.g., affected product, root cause, impact, or remediation) are not provided in the supplied connected documents. Please monitor for updates from official advisories.

CVE-2025-29839

Technical details about CVE-2025-29839 (affected product/version/root cause/impact/fix) are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2025-32716

CVE-2025-32716 (Windows Media) is a Windows component vulnerability described as an out-of-bounds read that enables a locally authenticated attacker to elevate privileges. The NCSC advisory lists CVE-2025-32716 under Windows Media with a base impact of 7.80 (Obtaining elevated privileges). No exp...

CVE-2025-49723

CVE-2025-49723 affects Windows StateRepository API, enabling local tampering of data due to missing authorization in the Server file path. The CNVD/NCSC entries confirm impact as manipulation of data with a high CVSS (8.8) and local attack vector; no public exploitation details are provided in th...

CVE-2025-55230

CVE-2025-55230 is a local privilege-escalation in the Windows MBT Transport driver (netbt.sys) caused by an untrusted pointer dereference when handling a specific IOCTL. An authenticated local user can elevate to SYSTEM by dereferencing a kernel address via kernel memory access. A PoC exploit exi...

CVE-2026-42991

CVE-2026-42991 describes a race condition in Windows Push Notifications arising from improper synchronization of a shared resource. This yields local privilege escalation for an authorized attacker. The CVSS v3.1 metrics indicate local attack vector, high impact on confidentiality, integrity, and...

CVE-2024-43526

Technical details (affected product/version, root cause, impact, or fix) for CVE-2024-43526 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2024-43534

CVE-2024-43534 is a Windows Graphics Component Information Disclosure vulnerability. The affected product is Windows Graphics Component; the entry indicates an information disclosure impact (confidentiality) with network attack vector, no integrity/availability impact, and user interaction requir...

CVE-2024-43540

CVE-2024-43540 corresponds to a Windows Mobile Broadband Driver Denial of Service vulnerability. Affected component: Windows Mobile Broadband Driver. Root cause/impact: DoS vulnerability; base CVSS not exceeding MEDIUM in the provided metrics, with impact limited to availability. Mitigation: Micr...

CVE-2024-43555

CVE-2024-43555 is listed in the connected documents as affecting the Windows Mobile Broadband Driver with a Denial-of-Service impact (CVSS approx. 6.5). The materials do not provide a detailed root cause, affected subcomponent, exploit vectors, or explicit patch/version information for this CVE. ...