CVE-2025-49722

Technical details about CVE-2025-49722 are not present in the provided documents. No affected products, root cause, exploit vector, or fixes are disclosed here. Monitor for updates and consult the primary CVE entry for authoritative information.

CVE-2025-49730

Technical details about CVE-2025-49730 are not publicly available in the provided connected documents. Monitor for updates from official advisories; no information on affected products, root cause, or fixes is provided here.

CVE-2025-54107

CVE-2025-54107 involves the Windows MapUrlToZone component with improper resolution of path equivalence, enabling circumvention of a security feature over a network. The entry lists CVSS 3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N (base 4.3, MEDIUM) and notes a network-exposed vector with no privileg...

CVE-2025-55229

CVE-2025-55229 concerns improper verification of cryptographic signatures in Windows Certificates, enabling a network attacker to spoof over the network. The primary root cause is flawed verification during certificate handling, with the CVSS data indicating network access, low attack complexity,...

CVE-2025-55233

CVE-2025-55233 is a Windows Projected File System Elevation of Privilege vulnerability caused by an out-of-bounds read. The CVE affects Windows Projected File System and can be exploited by an authorized local attacker with low privileges and no user interaction to elevate privileges locally (CVS...

CVE-2026-35422

Technical details for CVE-2026-35422 (affected components, root cause, impact, or patch) are not provided in the connected documents. Monitor for authoritative updates from official sources.

CVE-2026-41097

CVE-2026-41097 describes a local security bypass in Windows Secure Boot caused by reliance on a non-updateable component. An authorized attacker could bypass a security feature locally. The CVE’s metrics show a medium base score (CVSS 3.1: 6.7; Local attack vector; high confidentiality/integrity/...

CVE-2026-45595

Technical details about CVE-2026-45595 are not publicly available in the provided documents. Monitor for updates about affected components, root cause, and remediation.

CVE-2026-49794

CVE-2026-49794 concerns the Windows USB Audio Class driver (usbaudio.sys). The vulnerability is an out-of-bounds read in the driver that enables an unauthorized attacker to disclose information when a physical access scenario is present. Attacker class: physical access with low attack complexity ...

CVE-2026-50411

CVE-2026-50411 affects Active Directory Federation Services (AD FS) and is described as a stack-based buffer overflow that enables a remote attacker to cause a denial of service over the network. Public references in the connected documents confirm the DoS impact and Microsoft has released update...

CVE-2026-50474

CVE-2026-50474 is a Remote Desktop Client vulnerability described as a use-after-free that allows an unauthenticated attacker to execute code over a network. The affected component is the Remote Desktop Client; the root cause is use-after-free in the client handling of remote sessions. The CVE is...

CVE-2026-56184

CVE-2026-56184 describes a local information disclosure in Windows Win32K, enabling an authorized attacker to disclose sensitive information locally. The NVD entry notes a medium severity (CVSS v3.1: 5.5) with local access and low attack complexity but high confidentiality impact. Public details ...

CVE-2026-59128

The CVE-2026-59128 entry documents an out-of-bounds read in Windows Encrypting File System (EFS) that can let an authorized local attacker disclose information. Affected component: Windows EFS. Root cause: out-of-bounds read leading to information disclosure. Impact: local disclosure of informati...

CVE-2026-59138

CVE-2026-59138 is a null pointer dereference in Microsoft Remote Registry Service that allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Lo...

CVE-2026-61347

CVE-2026-61347 describes a buffer over-read in Windows Event Logging Service that allows an authorized attacker with LOW privileges and local access to disclose information. The CVSS 3.1 metrics indicate a MEDIUM base score (5.5), with LOCAL attack vector, low attack complexity, no user interacti...

CVE-2026-61348

This CVE (CVE-2026-61348) is a local privilege escalation in the Windows Ancillary Function Driver for WinSock. The issue is a use-after-free in the driver component, enabling an authenticated attacker to elevate privileges on the affected system. The provided materials indicate a high-severity i...

CVE-2026-61932

The CVE-2026-61932 entry describes a type confusion vulnerability in the Windows DWM Core Library that allows an authorized attacker to achieve local privilege escalation . Affected component is the Windows DWM Core Library; root cause is resource access via incompatible type. The provided docume...

CVE-2026-62729

CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...

CVE-2026-62892

CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...

CVE-2025-55680

CVE-2025-55680 concerns a TOCTOU race condition in the Windows Cloud Files Mini Filter Driver that can enable an authorized attacker to achieve local privilege escalation. The available connected docs confirm the affected component (Windows Cloud Files Mini Filter Driver) and the privilege impact...

CVE-2026-24294

CVE-2026-24294 affects Windows SMB Server. The core issue is improper authentication in the SMB component, enabling an authorized local attacker to elevate privileges. The CVE is rated high (CVSS 3.1 base 7.8) with local attack vector, low complexity, and no user interaction required, and the imp...

CVE-2026-32162

CVE-2026-32162 is a Windows COM elevation of privilege vulnerability with local access, no user interaction, and high impact to confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.4 (HIGH) with exploit code maturity labeled UNPROVEN and remediation level OFFICIAL_FIX. Affec...

CVE-2026-32181

The CVE-2026-32181 entry describes a Denial of Service vulnerability in the Connected User Experiences and Telemetry Service. According to the metrics, it is a LOCAL, low-complexity attack requiring LOW privileges with no user interaction, and it can cause an availability impact (CVSSv3.1 base sc...

CVE-2026-47648

CVE-2026-47648 — Windows Storage contains an untrusted search path vulnerability that enables a locally authenticated attacker to perform privilege escalation. The issue arises from a trusted component loading an untrusted search path, potentially elevating privileges with high impact (C/H/I/H/A/...

CVE-2026-58532

CVE-2026-58532 is a Windows Kernel elevation-of-privilege vulnerability: integer overflow/wraparound in the kernel could allow a local attacker to escalate privileges. Connected sources (NVD, EUVD/ENISA, CIRCL sightings) corroborate Windows Kernel impact and references to Microsoft security updat...

CVE-2026-58598

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and advisories for CVE-2026-58598.

CVE-2026-62743

CVE-2026-62743 describes an out-of-bounds read in Windows Win32K that can lead to local information disclosure by an authorized attacker. The vulnerability affects the Win32K component and is exploitable with low privileges and no user interaction, with a local attack vector. The CVSS3.1 base sco...

CVE-2026-62782

CVE-2026-62782 is a Windows SMB Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The description and multiple sources (NVD, MSRC, CIRCL, ENISA/NCSC advisory references) confirm the affected compo...

CVE-2025-48818

CVE-2025-48818 is a TOCTOU race condition in Windows BitLocker that enables bypass of a security feature via physical access. The CVE is listed in NCSC/NCSC-2025-0213 with impact described as bypassing security measures under Windows BitLocker and a CVSS v3.1 base score of 6.8 (PHYSICAL vector, L...

CVE-2025-49725

Technical details beyond the short CVE description are not provided in the supplied documents. No product/version/patch specifics, exploit details, or remediation steps are available. Monitor official Microsoft advisories for patched versions and remediation guidance.

CVE-2026-20840

CVE-2026-20840 is a Windows NTFS heap-based buffer overflow that enables local code execution by an authorized attacker. The vulnerability affects the Windows NTFS component and is rated with a CVSS v3.1 base score of 7.8 (High) for local, low-attack‑complexity, no user interaction, with high con...

CVE-2026-20849

CVE-2026-20849 is a Windows Kerberos elevation of privilege vulnerability caused by reliance on untrusted inputs in a security decision. The description indicates an authorized attacker could elevate privileges over a network. The provided documents give a CVSS v3.1 base score of 7.5 (Network, Hi...

CVE-2026-24296

CVE-2026-24296 affects Windows Device Association Service, where concurrent execution on a shared resource with improper synchronization (race condition) enables a local, authorized attacker to elevate privileges. The issue is documented across multiple sources (NVD/NCSC/ENISA/CVEs listing) with ...

CVE-2026-32074

CVE-2026-32074 concerns the Windows Projected File System (ProjFS) Elevation of Privilege. The vulnerability is local: attack vector Local, requires LOW privileges, with LOW attack complexity and no user interaction. It impacts confidentiality, integrity, and availability (all HIGH). The CVSS 3.1...

CVE-2026-42971

CVE-2026-42971 involves a use of an uninitialized resource in Windows Push Notifications, enabling a locally authenticated attacker to disclose information. Affected component: Windows Push Notifications. Root cause: use of an uninitialized resource. Impact: local information disclosure with Conf...

CVE-2026-44799

This CVE (CVE-2026-44799) describes a heap-based buffer overflow in the Remote Desktop Client that allows an unauthorized attacker to execute code remotely over a network . The connected records corroborate a network-based, remote code execution vulnerability affecting the Remote Desktop Client, ...

CVE-2026-47656

CVE-2026-47656 involves a vulnerability in Windows Boot Manager described as a protection mechanism failure that allows an authorized attacker to locally bypass a security feature. The associated CVSS 3.1 metrics indicate: Local attack vector, Low attack complexity, High privileges required, No u...

CVE-2026-50419

CVE-2026-50419 is a Windows Kernel information-disclosure vulnerability that could allow an authorized local attacker to disclose sensitive data. The CVSS v3.1 base score is 3.3 (LOW) with LOCAL access and low complexity; no exploitation details are provided in the connected documents. Microsoft ...

CVE-2026-50493

CVE-2026-50493 is a DirectX Graphics Kernel elevation-of-privilege vulnerability in Windows caused by a use-after-free in the Windows Graphics Kernel/DirectX component. It enables a locally authenticated attacker to elevate privileges. The CVSS v3.1 vector (L/L/L/L/U/H/H) indicates local, low att...

CVE-2026-61350

Windows NTFS contains a buffer over-read that can disclose information when an attacker performs a physical attack. Affected component: NTFS; root cause: buffer over-read. CVSSv3.1 metrics indicate AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N with base score 4.6 (Medium). Impact is limited to confidential...

CVE-2026-62755

CVE-2026-62755 affects the Windows DHCP Client. The vulnerability is a stack-based buffer overflow in the DHCP client component, leading to local privilege escalation for an authorized attacker. The CVSS 3.1 vector indicates Local attack, Low attack complexity, Low privileges required, with no us...

CVE-2025-49664

Technical details about CVE-2025-49664 (affected components, root cause, impact, or remediation) are not provided in the connected documents. Monitor official advisories and vendor patch notes for authoritative information and fixes.

CVE-2026-26159

CVE-2026-26159 concerns the Windows Remote Desktop Licensing Service. The issue allows local attackers with low privileges and no user interaction to exploit elevation of privilege, impacting confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack ve...

CVE-2026-27906

Summary: CVE-2026-27906 (Windows Hello) is a local security feature bypass caused by improper input validation, enabling an authenticated user with high privileges to bypass a security feature. The vulnerability affects Windows Hello components and has an indicative CVSSv3.1 base score of 4.4 (At...

CVE-2026-32209

Technical details (affected components, exploit vectors, root cause, vulnerable versions, and fixes) are not publicly provided in the supplied documents. Monitor official updates from NVD/CVE for further information.

CVE-2026-50365

CVE-2026-50365 describes an Elevation of Privileges in the Windows RPC API (RPC server) due to improper authentication, enabling an adjacent-network attacker to gain high-priority access. Public data confirms an adjacent-network attack vector with high severity (CVSS ~8.0). The affected component...

CVE-2026-50366

CVE-2026-50366 describes a Denial of Service in Windows Active Directory Domain Services caused by a null pointer dereference. The vulnerability is exploitable over the network with no user interaction, requiring low privileges and network access from an authenticated attacker; the impact is deni...

CVE-2026-62746

CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...

CVE-2025-47991

CVE-2025-47991 maps to a Microsoft IME (Input Method Editor) use-after-free vulnerability reported as a resource-management error that can enable local privilege escalation. Connected CNVD-2025-16874 corroborates an IME privilege-elevation risk from Microsoft IME. Publicly stated impact in the CV...

CVE-2025-48804

CVE-2025-48804 : Windows BitLocker is affected by a security feature bypass through acceptance of extraneous untrusted data with trusted data, enabling a physical attacker to bypass protections. The connected Microsoft-related documents indicate that Microsoft released security updates addressing...