CVE-2026-50367

CVE-2026-50367 describes an elevation of privilege in the Windows Sensor Data Service due to a logic flaw: incorrect access of an indexable resource (a range error). An authenticated local attacker could exploit this to escalate privileges on the affected system. The vulnerability’s CVSS 3.1 vect...

CVE-2026-50433

CVE-2026-50433 (Windows Media) is a use-after-free vulnerability in Windows Media that enables a locally authenticated attacker to elevate privileges. Affected component: Windows Media. Root cause: use-after-free error. Impact: local privilege escalation with high severity (CVSS 3.1 base score 7....

CVE-2026-50470

CVE-2026-50470 describes an out-of-bounds read in Windows Network Policy Server SNMP that could let an unauthenticated attacker disclose information over the network. The vulnerability affects the NPS SNMP handling and has a CVSS v3.1 base score of 7.5 (High) with network attack vector, low attac...

CVE-2026-56644

CVE-2026-56644 is a Windows Kernel elevation-of-privilege vulnerability described as a use-after-free in the DirectX Graphics Kernel. Exploitation would allow a local, authenticated attacker to escalate privileges. Public references indicate Microsoft has released updates (MSRC pages and related ...

CVE-2026-58528

CVE-2026-58528 describes an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that could lead to an information disclosure under a physical-access scenario. The vulnerability affects the Windows USB Audio subsystem and is rated with CVSSv3.1: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/...

CVE-2026-62702

CVE-2026-62702 is a denial-of-service vulnerability in the Windows Graphics Kernel caused by a null pointer dereference that can be triggered over a network. Per NVD, CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H (base 8.6, HIGH) with impact on availability. Microsoft MSRC lists this vulnerabili...

CVE-2026-62753

CVE-2026-62753 is a heap-based buffer overflow in Windows HTTP.sys that allows local privilege escalation by an authorized attacker. Affected: Windows HTTP.sys; Impact: local high-severity compromise of confidentiality, integrity, and availability. CVSS: 7.0 (3.1) with LOCAL, LOW privileges requi...

CVE-2026-65790

CVE-2026-65790 is a heap-based buffer overflow in Windows Message Queuing that enables an authorized, locally authenticated attacker to achieve elevation of privilege. Affected component: Windows Message Queuing; root cause: improper heap handling leading to a overflow condition. Impact: local pr...

CVE-2025-47984

Technical details about CVE-2025-47984 (affected components, exploitability, root cause, and fix) are not provided in the connected documents. Monitor for updates from MSRC/NVD for concrete context and remediation.

CVE-2025-54104

CVE-2025-54104 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion (incompatible type) issue that could enable a locally authenticated attacker to elevate privileges. Related connected docs (NCSC) list Defender Firewall Service and classify the impact as ...

CVE-2025-59275

CVE-2025-59275 involves Windows Authentication Methods with improper validation of a specified input type, enabling an authorized local attacker to escalate privileges. The connected EUVD-2025-34271 entry corroborates the same description. No technical details about affected product versions, roo...

CVE-2025-64658

CVE-2025-64658 is a Windows Shell elevation-of-privilege vulnerability described as a race condition caused by concurrent execution using a shared resource. The available connected documents confirm impact as local privilege escalation for an attacker with local access and low privileges, requiri...

CVE-2026-20875

CVE-2026-20875 is a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) that enables a network-based denial of service. The vulnerability is documented with a CVSS v3.1 base score of 7.5 (Network, Low complexity, No privileges, No user interaction; impact: Avail...

CVE-2026-21231

CVE-2026-21231 describes a race condition in the Windows Kernel involving concurrent execution on a shared resource with improper synchronization, enabling local privilege escalation for an authorized attacker. The vulnerability impact is: local attack vector, requiring low privileges, no user in...

CVE-2026-21238

CVE-2026-21238 concerns an improper access control vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation by an authorized attacker. The CVSSv3.1 vector indicates a high-severity impact (C/H, I/H, A/H) with local attack, low complexity, and a low pr...

CVE-2026-27929

CVE-2026-27929 is a Time-of-check Time-of-use (toctou) race condition in Windows LUAFV (LUA File Virtualization Filter Driver) that enables a locally authenticated attacker to elevate privileges. Red Hat and NCSC advisories confirm the Windows LUAFV vulnerability and its local privilege-escalatio...

CVE-2026-34338

CVE-2026-34338 : Use-after-free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. The publicly provided documents confirm the vulnerability and impact but do not reveal affected Windows versions, exact internal component, or remediation details. The NVD ent...

CVE-2026-45653

CVE-2026-45653: A Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The issue affects kernel code paths susceptible to use-after-free, with an attack vector that is LOCAL, requiring LOW privileges and NO user interaction; the impact per...

CVE-2026-45656

CVE-2026-45656 involves a protection mechanism failure in Windows UEFI that allows an authorized attacker to bypass a security feature locally. The CVSSv3.1 vector is AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The attack is local with low complexity and requires low priv...

CVE-2026-48578

CVE-2026-48578 describes a protection mechanism failure in Windows Secure Boot that can allow an authorized attacker to bypass a security feature locally. The available data indicate a local attack vector with high impact on confidentiality and integrity (CVSS 3.1: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H...

CVE-2026-50364

Technical details (affected product/version, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-50409

CVE-2026-50409 affects the Windows Overlay Filter. The issue is an information disclosure where an authorized attacker can locally access sensitive information exposed by the Overlay Filter. The base CVSS v3.1 is 5.5 (Local, Low Attack Complexity, Low Privileges) with High confidentiality impact....

CVE-2026-50647

CVE-2026-50647: AD FS denial-of-service due to an infinite loop in AD FS. Public sources (NVD/EUVD/NCSC, CIRCL sighting, MSRC) confirm a network-exploitable condition causing service disruption; no exploitation details provided in the docs. Microsoft has released updates addressing the vulnerabil...

CVE-2026-61924

Technical details about CVE-2026-61924 are not publicly provided in the supplied documents; monitor official advisories from Microsoft and NVD for updates, affected products, and remediations.

CVE-2026-62752

CVE-2026-62752 is a Windows Kerberos heap-based buffer overflow that allows an authorized attacker to elevate privileges locally. The description confirms a local, low-attack-complexity path with high impact to confidentiality, integrity, and availability. No specific exploit details or versions/...

CVE-2026-65797

CVE-2026-65797 involves a numeric truncation error in Windows DNS that can allow an authorized attacker to elevate privileges locally. The available documents confirm the affected component as Windows DNS and the root cause as a numeric truncation flaw. The impact is local privilege escalation wi...

CVE-2025-48814

Technical details about CVE-2025-48814 (affected product/version, exploit specifics, and remediation) are not provided in the connected documents. Monitor official updates from Microsoft/NVD for concrete details and fixes.

CVE-2025-49661

Technical details about CVE-2025-49661 (affected product/version, root cause, exploitability, or fix) are not provided in the connected documents; the supplied sources cover Windows KB/security updates but do not describe the CVE specifics.

CVE-2025-53808

CVE-2025-53808 is a local privilege-escalation in Windows Defender Firewall Service caused by a type confusion in resource access. Affected: Windows Defender Firewall Service (Windows). Impact and exploitability as per provided metrics: local, high privileges required, none user interaction, conf...

CVE-2025-54911

CVE-2025-54911 refers to a use-after-free vulnerability in Windows BitLocker that could allow an authorized, locally present attacker to elevate privileges. The CVE entry notes a high-impact scenario with local attack vector, requiring low privileges and user interaction, per the provided CVSS 3....

CVE-2025-54915

CVE-2025-54915 describes a type-confusion vulnerability in the Windows Defender Firewall Service that could allow a locally authenticated attacker with high privileges to elevate to a higher level of access. The linked sources confirm the CVE exists and cite Defender Firewall Service as the affec...

CVE-2025-55340

CVE-2025-55340 is a Windows Remote Desktop Protocol security feature bypass caused by improper authentication that can enable an authenticated local attacker to bypass a security feature. The vulnerability affects Windows Remote Desktop Protocol and is rated HIGH with a CVSSv3.1 vector of AV:L/AC...

CVE-2025-55681

CVE-2025-55681 is an out-of-bounds read vulnerability in Windows DWM (Desktop Window Manager) that allows an authenticated, locally-present attacker to elevate privileges. The connected EUVD-2025-34414 entry corroborates that the flaw is in the Windows DWM and leads to local privilege escalation....

CVE-2025-59242

CVE-2025-59242 is a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock that enables local privilege escalation for an authenticated user. Connected Microsoft KB advisories confirm the vendor-fixed remediation via October 2025 security updates (e.g., KB5066793 and rela...

CVE-2025-59502

CVE-2025-59502 describes an issue of uncontrolled resource consumption in Windows Remote Procedure Call that can let an unauthenticated attacker cause a denial of service over the network. The connected documents confirm the vulnerability description across multiple feeds but do not provide concr...

CVE-2025-60703

Technical details about CVE-2025-60703 are not provided in the initial or connected documents. Monitor for updates as more specifics (affected product/version, root cause, mitigations) may be published.

CVE-2025-64673

CVE-2025-64673 is a Windows Storage VSP Driver elevation-of-privilege vulnerability in the Storvsp.sys component. The connected sources confirm improper access control in Storvsp.sys that could allow an authorized, local attacker with low privileges to obtain higher privileges. The CVSS v3.1 base...

CVE-2026-20864

CVE-2026-20864 describes a heap-based buffer overflow in the Connected Devices Platform Service (Cdpsvc) on Windows that enables an authorized local attacker to elevate privileges. The vulnerability affects Cdpsvc and is rated high (CVSS v3.1 base 7.8; Local, Low Attack Complexity, Privileges Req...

CVE-2026-20927

CVE-2026-20927 affects Windows SMB Server and is described as a race-condition in a shared resource that can allow an authorized attacker to cause a denial of service over the network. The connected Nessus NASL entries list this CVE under Windows SMB Server with a 5.3 base score (Denial-of-Servic...

CVE-2026-25189

The CVE-2026-25189 entry concerns a Use-after-Free in Windows DWM Core Library that allows an authorized attacker to locally elevate privileges. Affected component is Windows DWM Core Library; root cause is a use-after-free condition leading to privilege escalation. Microsoft and related advisori...

CVE-2026-26170

CVE-2026-26170 is a PowerShell elevation of privilege vulnerability described as requiring local access with low privileges and no user interaction. CVSS 3.1 base score 7.8 (HIGH) with high impact on confidentiality, integrity, and availability; exploit code maturity is UNPROVEN. The entry notes ...

CVE-2026-42905

The CVE-2026-42905 entry describes a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to escalate privileges locally. Affected component: Windows DWM Core Library. Root cause: use-after-free condition leading to local privilege escalation. Impact: el...

CVE-2026-42911

CVE-2026-42911 describes a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock. The issue permits an authorized local attacker to elevate privileges. The documented impact is local privilege elevation with high severity (CVSSv3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=H/A=H,...

CVE-2026-42993

CVE-2026-42993 describes a heap-based overflow in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. The underlying issue is a heap-based buffer overflow in input handling within the client, leading to remote code execution with high impact (confid...

CVE-2026-45605

CVE-2026-45605 is a Windows Bluetooth Service use-after-free vulnerability that allows an authorized, locally located attacker to escalate privileges. The CVSS 3.1 base score is 7.8 (High) with local attack vector, low attack complexity, and no user interaction; impact includes confidentiality, i...

CVE-2026-48573

CVE-2026-48573 describes a protection mechanism failure in Windows Secure Boot allowing an authorized attacker to bypass a security feature locally. The NVD entry notes a local attack vector with high impact on confidentiality and integrity (C:H/I:H) and a CVSS v3.1 base score of 7.9. Connected d...

CVE-2026-50372

CVE-2026-50372 — Windows Redirected Drive Buffering : A buffer over-read vulnerability in Windows Redirected Drive Buffering could allow an authorized, local attacker to elevate privileges. The CVE is corroborated by multiple sources (NVD, MSRC, EUVD/ENISA, CIRCL sighting) with an incident descri...

CVE-2026-50666

CVE-2026-50666 is a Windows Privilege Escalation vulnerability described as a use-after-free in the Windows Remote Access Connection Manager. The issue allows an authorized attacker to elevate privileges over a network. Public sources (NVD/NCSC/NVD-related) corroborate the impact and indicate Mic...

CVE-2026-56186

CVE-2026-56186 is a Windows Schannel vulnerability described as an out-of-bounds read that enables an authorized attacker to disclose information over a network. The CVE affects the Windows Schannel security component and is rated with CVSS v3.1 base score 8.1 (High) and NETWORK attack vector wit...

CVE-2026-65786

CVE-2026-65786 is a heap-based buffer overflow in Desktop Window Manager that allows an authorized local attacker to elevate privileges. Affected: Desktop Window Manager on Windows. Root cause: heap-based overflow in DWM. Impact: local privilege escalation with high confidentiality/integrity/avai...