1768 matches found
CVE-2025-62213
Technical details about CVE-2025-62213 (affected component, root cause, impact, remediation) are not disclosed in the provided documents; no specifics on exploitability or affected products are available here; monitor for updates.
CVE-2026-20821
CVE-2026-20821 is a Windows Remote Procedure Call information disclosure vulnerability that could allow a local attacker to obtain sensitive data. The available description confirms an information disclosure resulting from RPC handling, but the connected documents do not provide vendor-specific p...
CVE-2026-24293
CVE-2026-24293 describes a null pointer dereference in the Windows Ancillary Function Driver for WinSock that enables an authorized, local attacker to elevate privileges. The vulnerability is identified in Microsoft’s advisory ecosystem and is tracked across multiple feeds (NVD/NCSC/ENISA EUVD) w...
CVE-2025-59516
CVE-2025-59516 is a Windows Storage VSP Driver elevation-of-privilege vulnerability. The issue is described as missing authentication for a critical function, enabling an authorized local attacker to elevate privileges. Public references in connected documents confirm the affected component is th...
CVE-2025-60717
CVE-2025-60717 is a use-after-free vulnerability in Windows Broadcast DVR User Service that allows an authorized user to gain elevated privileges locally. The connected sources (NVD, CVE lists, and EU/NCSc advisories) corroborate the affected component and privilege-elevation impact, with no publ...
CVE-2025-59514
Technical details about CVE-2025-59514 are not provided in the supplied documents. No affected product versions, root cause, or remediation are specified here. Monitor for updates from official sources for confirmation and fixes.
CVE-2025-60714
Technical details for CVE-2025-60714 are not provided in the supplied documents. Connected KB/MS update entries discuss Windows Secure Boot and general OS updates but do not disclose affected products, root cause, or fixes for this CVE. Monitor for updates.
CVE-2025-62465
CVE-2025-62465 is a local Denial-of-Service vulnerability in Windows DirectX (DirectX Graphics Kernel) caused by a null pointer dereference. It affects Windows DirectX components and can be exploited locally by an authorized attacker to disrupt services. Connected sources confirm the vulnerabilit...
CVE-2026-25176
CVE-2026-25176 is a local elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and no user interaction. It impacts confidentiality, integrity, and availability. Exploita...
CVE-2026-62726
CVE-2026-62726 is a Windows vulnerability described as a use-after-free in the Windows Telephony Service that enables local privilege escalation by an authorized user. The CVSS 3.1 vector (LOCAL, HIGH impact to confidentiality, integrity, and availability) yields a base score of 7.0. The provided...
CVE-2025-55334
CVE-2025-55334 affects the Windows Kernel and is described as a security feature bypass caused by cleartext storage of sensitive information, enabling local bypass of security protections. The connected Microsoft KBs (KB5066835 and KB5066793) document OS security updates that address this vulnera...
CVE-2025-62217
Technical details about CVE-2025-62217 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories for affected products, impact, and remediation.
CVE-2026-32153
CVSS and impact : CVE-2026-32153 is a local privilege escalation in the Windows Speech Runtime (Windows Speech) caused by a use-after-free condition in Microsoft Windows Speech. The vulnerability can be exploited locally by an authorized user with low privileges and no user interaction to obtain ...
CVE-2026-23672
CVE-2026-23672 corresponds to a Privilege Elevation vulnerability in the Windows Universal Disk Format File System Driver (UDFS). The NVD entry confirms an Elevation of Privilege impact with a CVSS v3.1 base score of 7.8 (Local, Privileges Required: Low, No user interaction) and indicates a Windo...
CVE-2026-32217
CVE-2026-32217 affects Windows Kernel. The vulnerability arises from insertion of sensitive information into a log file, enabling an authorized, local attacker with LOW privileges to disclose information. CVSS v3.1 is provided as 5.5 MEDIUM (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Microsoft and par...
CVE-2025-62208
CVE-2025-62208 affects Windows License Manager. The issue involves insertion of sensitive information into a log file, enabling an authorized local attacker to disclose data. Impact is local information disclosure; CVSS from Microsoft indicates low access/privilege requirements with local access,...
CVE-2025-62209
CVE-2025-62209 concerns the Windows License Manager. The vulnerability involves insertion of sensitive information into a log file, which could allow an authorized local attacker to disclose sensitive information. The CVSS 3.1 metrics (local, low attack complexity, low privileges required) indica...
CVE-2026-20823
CVE-2026-20823 is a Windows File Explorer information disclosure vulnerability that could allow a local attacker to view sensitive data. The CVE is mapped to Windows components handling File Explorer data exposure; its impact is confined to local access with low complexity and low privileges requ...