CVE-2026-27919

CVE-2026-27919 is a Windows UPnP Device Host elevation-of-privilege vulnerability. It is a local attack with low privileges required and no user interaction, carrying a CVSS v3.1 base score of 7.8 (High). The impact spans confidentiality, integrity, and availability (all High). The exploitation m...

CVE-2026-41108

CVE-2026-41108 is a heap-based buffer overflow in the Microsoft Windows DNS Client that allows an authorized, local attacker to perform privilege escalation. Affected component: Windows DNS client functionality (DNS resolution path); root cause: heap-based overflow leading to elevation of privile...

CVE-2026-61359

CVE-2026-61359 describes a heap-based buffer overflow in Windows Storage that enables an authorized, local attacker with low privileges and no user interaction to achieve elevation of privileges. The available documents (NVD, CVE listing) confirm the vulnerability and impact but do not provide ex...

CVE-2026-62707

CVE-2026-62707 affects Windows Modern Device Management (MDM). It is a use-after-free vulnerability that allows an authorized, local attacker to elevate privileges (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The connected documents confirm the same description; no exploitation status, exact ...

CVE-2026-62738

The vulnerability CVE-2026-62738 affects Windows Management Instrumentation and enables an authorized, local attacker to disclose information through an out-of-bounds read. The available descriptions consistently state information disclosure as the impact; no details on specific vulnerable binari...

CVE-2026-62771

CVE-2026-62771 describes a heap-based buffer overflow in Windows Cloud Files Mini Filter Driver that allows an authorized attacker to elevate privileges locally. Impact is local privilege escalation with high severity (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The provided documents do not...

CVE-2026-62793

CVE-2026-62793 describes a buffer over-read in Windows NTFS that can allow an authorized local attacker to disclose information. Affected component: Windows NTFS filesystem handling. Root cause: memory over-read leading to confidential data exposure (C: HIGH, I: NONE, A: NONE per CVSS 3.1). Explo...

CVE-2025-55223

CVE-2025-55223 involves a race condition in the Graphics Kernel allowing a locally authenticated attacker to elevate privileges. The initial entry notes local privilege elevation via concurrent execution with improper synchronization. Connected documents confirm the CVE-55223 reference in a risk ...

CVE-2026-20839

CVE-2026-20839 : Improper access control in the Windows Client-Side Caching (CSC) Service may allow an authorized local attacker to disclose information. The CVSSv3.1 vector indicates a local attack with low complexity and low privileges required, but with high confidentiality impact (C:H, I:N, A...

CVE-2026-26166

CVE-2026-26166 is a Windows Shell vulnerability described as a double free in the Shell that allows an authorized attacker to locally elevate privileges. Public materials consistently label it as a Windows Shell elevation of privilege issue, with impact limited to local privileges. The Red Hat/NC...

CVE-2026-27922

CVE-2026-27922 is a vulnerability described as a use-after-free in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. The Red Hat/NVD entries confirm the same description. The connected documents do not enumerate affected product v...

CVE-2026-32079

CVE-2026-32079 is a Web Account Manager information disclosure vulnerability with a CVSSv3.1 base score of 5.5 (MEDIUM). It is exploitable locally with low attack complexity and low privileges required; user interaction is not required. The confidentiality impact is HIGH, while integrity and avai...

CVE-2026-33100

CVE-2026-33100: Use-after-free in Windows Ancillary Function Driver for WinSock allows a locally authorized privilege escalation. The connected advisory set confirms the driver as affected and lists CVE-2026-33100 with a base CVSS v3.1 score of 7.0 (High) and local attack vector. Mitigation is vi...

CVE-2026-35415

Technical details about CVE-2026-35415 are not publicly available in the provided connected documents. Monitor for updates for specifics on affected products, impact, and mitigations once they are published.

CVE-2026-42915

CVE-2026-42915 affects Windows TCP/IP. The issue arises from an incorrect calculation of a buffer size in the TCP/IP stack, enabling an authenticated attacker on an adjacent network to cause a denial of service. In the supplied documents, the description clearly states the root cause and the impa...

CVE-2026-59135

The CVE-2026-59135 entry describes a weakness in the Microsoft Windows Search Component where weak authentication could allow an authorized local attacker to disclose information. Affected software is Windows with the Windows Search Component implicated as the vulnerable element; root cause is we...

CVE-2026-62724

CVE-2026-62724 is a local privilege escalation affecting the Windows Telephony Service due to a use-after-free. An authorized attacker can elevate privileges locally. Root cause: use-after-free in Telephony service code; impact: high (local elevation of rights) per CVSS 3.1; exploitability and ex...

CVE-2026-62730

CVE-2026-62730 describes a buffer over-read in the Windows Wired AutoConfig Service that can disclose information locally. The issue is exploitable by an authorized, low-privilege local attacker (LOCAL attack vector, LOW privileges, no user interaction) with a CVSS v3.1 base score of 5.5 (HIGH co...

CVE-2026-65798

CVE-2026-65798 corresponds to a numeric truncation error in Windows DNS that enables an authorized attacker to perform local privilege escalation. Affected component: Windows DNS. Root cause: numeric truncation in DNS handling leading to elevated privileges. Impact is described as local elevation...

CVE-2025-50158

CVE-2025-50158 is a TOCTOU race condition in Windows NTFS that could allow a local attacker to disclose information. The description confirms the vulnerability is a local information-disclosure flaw affecting NTFS. Connected sources list CVE-2025-50158 under Windows NTFS with an impact of Access ...

CVE-2025-50177

CVE-2025-50177 affects Windows Message Queuing (MSMQ) with a use-after-free in the MSMQ path that enables remote code execution over a network. Affected: Windows MSMQ component. Impact per CVSS: high (8.1) with network access, no user interaction required. Exploitation as of the connected documen...

CVE-2025-54092

Technical details for CVE-2025-54092 are not publicly provided in the supplied documents. Connected KB/MSFT resources reference related issues but do not specify affected products, versions, root cause, or remediation for this CVE. Monitor for updates.

CVE-2025-60708

CVE-2025-60708 affects Storvsp.sys driver and, per the NC SC advisories, enables Denial-of-Service via an untrusted pointer dereference. The vulnerability is localized (requires local access) and relates to the Storvsp.sys component in Windows. The provided connected documents confirm the affecte...

CVE-2025-60715

Technical details about CVE-2025-60715 (RRAS heap overflow, affected components, fixes) are not provided in the connected documents. Public technical specifics, affected versions, and remediation steps are not disclosed here; monitor for official updates.

CVE-2025-62573

CVE-2025-62573 is a DirectX Graphics Kernel elevation-of-privilege vulnerability described as a use-after-free in Windows DirectX that enables an authorized, local attacker to obtain elevated privileges. The EUVD and related advisories confirm the issue and map it to a Windows DirectX privilege e...

CVE-2026-20811

CVE-2026-20811 is a local privilege escalation in Windows Win32K (ICOMP) caused by type confusion. Exploit would grant elevated privileges to an authorized user on the same host. Microsoft’s January 2026 updates address this family of issues (e.g., KB5074109/KB5073457 for affected Windows version...

CVE-2026-20824

CVE-2026-20824 is a Windows Remote Assistance vulnerability described as a protection mechanism failure that enables a local attacker to circumvent a security measure. It is listed with a local attack vector, requiring user interaction, and a high confidentiality impact. Connected sources identif...

CVE-2026-21253

CVE-2026-21253 is a Windows vulnerability in the Mailslot File System described as a use-after-free issue that can enable local privilege escalation. The CVE’s CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high attack complexity, and requires low privileges and no user interaction. The...

CVE-2026-21255

CVE-2026-21255 is a Windows Hyper-V security feature bypass vulnerability described as improper access control that enables an authorized local attacker to bypass a security feature. Publicly available sources identify Hyper-V as the affected component, with the root cause tied to access-control ...

CVE-2026-26181

CVE-2026-26181 : Microsoft Brokering File System Elevation of Privilege. The CVSS vector (LOCAL, LOW attack complexity, LOW privileges required, NONE user interaction) yields a base score of 7.8 (HIGH). The vulnerability affects the file system brokering path and is described as an Elevation of P...

CVE-2026-33099

Technical details (affected products, root cause, vulnerable components, or exploitation specifics) are not publicly provided in the supplied documents. Monitor for updates from sources like MSRC and the CVE record.

CVE-2026-58638

CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...

CVE-2025-49660

Technical details about CVE-2025-49660 (affected product/component/version, root cause, impact, exploit status, or available patch) are not provided in the connected documents; monitor official disclosures for updates.

CVE-2025-53142

CVE-2025-53142 is a local privilege escalation in the Microsoft Brokering File System caused by a use-after-free condition. The issue affects Windows where an authorized attacker can elevate privileges locally. Microsoft has released fixes as part of the August 2025 updates (e.g., KB5064010 and r...

CVE-2025-53801

CVE-2025-53801 is a Windows DWM core library elevation-of-privilege vulnerability described as an untrusted pointer dereference that enables a locally authenticated attacker to achieve elevation of privileges . The CVE is associated with a CVSS v3.1 base score of 7.8 (HIGH) with local attack vect...

CVE-2025-60723

CVE-2025-60723 affects Windows DirectX and is described as a race condition in concurrent execution with a shared resource. The connected documents identify the component as Windows DirectX and list the impact as Denial of Service, indicating an authenticated attacker could induce a network-based...

CVE-2025-62470

CVE-2025-62470 is a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that enables a locally authenticated attacker to escalate privileges. The vulnerability affects the CLFS driver in Windows, with local access required and high impact on confidentiality, integrity, ...

CVE-2026-20804

CVE-2026-20804 concerns an issue in Windows Hello where an incorrect privilege assignment can enable a local attacker to tamper with biometric authentication locally. The entry identifies the affected area as Windows Hello and the root cause as a privilege/permission misassignment, resulting in p...

CVE-2026-25170

Technical details for CVE-2026-25170 are not publicly provided in the supplied documents. Monitor updates from Microsoft and national advisories for affected products, fixes, and confirmed impact.

CVE-2026-32090

CVE-2026-32090 affects the Windows Speech Brokered API. The vulnerability is an Elevation of Privilege with a CVSSv3.1 base score of 7.8 (HIGH). It is a LOCAL, LOW attack complexity, LOW privileges required, with no user interaction and UNCHANGED scope. The impact is HIGH for confidentiality, int...

CVE-2026-40408

CVE-2026-40408 is described as a use-after-free in Windows kernel-mode drivers that enables local privilege escalation for an authenticated attacker. The provided documents consistently state local elevation of privileges but do not specify the affected products, driver components, or vulnerable ...

CVE-2026-45593

CVE-2026-45593 is a use-after-free vulnerability in the Windows SDK that allows an authorized attacker to elevate privileges locally. The NVD/CVE entries describe that the underlying issue is a use-after-free in Windows SDK code leading to local privilege escalation with a CVSS v3.1 base score of...

CVE-2026-45636

The CVE-2026-45636 entries describe a heap-based buffer overflow in Windows NTFS that can allow an unauthenticated attacker to achieve local code execution. Affected software is Windows NTFS (filesystem driver). The underlying cause is a heap-based overflow; impact is high (CVE metrics show Local...

CVE-2026-65784

CVE-2026-65784 describes an out-of-bounds read in the Windows NTFS subsystem that allows an authorized local attacker to disclose information. The CVSS v3.1 base metrics assign a 5.5 (Medium) score with local attack vector , low attack complexity , and low privileges required , with no user inter...

CVE-2025-54111

CVE-2025-54111 is documented in the connected materials with concrete details: it involves a use-after-free in Windows UI XAML Phone DatePickerFlyout that can allow an attacker to elevate privileges locally. The NCSC-2025-0277 listing assigns a high severity (CVSS ~7.8–7.8 range) to CVE-2025-5411...

CVE-2025-55335

CVE-2025-55335 : A use-after-free in Windows NTFS leading to potential local privilege escalation. The initial entry notes local privileged impact but provides no concrete patch/version or workaround. Connected MSKBs describe OS update releases addressing various issues (KB5066793, KB5066835/7/ e...

CVE-2025-55339

CVE-2025-55339 : Windows Network Driver Interface Specification (NDIS) driver contains an out-of-bounds read that enables an authorized, local attacker to achieve elevated privileges. The Initial and Connected documents confirm the vulnerability description but do not provide concrete remediation...

CVE-2025-62218

CVE-2025-62218 affects Microsoft Wireless Provisioning System. The issue is described as a race condition caused by concurrent execution on a shared resource, enabling an authorized local attacker to elevate privileges. Supported documents identify the affected component and the local privilege-e...

CVE-2026-20831

The CVE-2026-20831 entry corresponds to a TOCTOU race condition in Windows Ancillary Function Driver for WinSock that could allow a local, authenticated attacker to elevate privileges. The description in the initial document confirms local privilege escalation as the impact. Connected documents i...

CVE-2026-21236

CVE-2026-21236 describes a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock (AFD) that enables an authenticated local attacker to obtain elevated privileges. The vulnerability is categorized as a local, privilege-escalation issue, with the affected component being t...