CVE-2025-50155

CVE-2025-50155 corresponds to a local privilege-escalation vulnerability in Windows Push Notifications. Affected component: Windows Push Notifications service. Root cause: access of a resource using an incompatible type (type confusion). Impact: authorized attacker on the same device can escalate...

CVE-2025-53134

Technical details about CVE-2025-53134 are not publicly disclosed in the provided Connected documents. Available sources confirm the vulnerability description only (race condition in Windows Ancillary Function Driver for WinSock with local privilege escalation). Monitor for updates.

CVE-2025-53154

CVE-2025-53154 concerns the Windows Ancillary Function Driver for WinSock and describes a null pointer dereference that enables a local, authorized user to achieve privilege escalation. The CVSSv3.1 metrics cited by Microsoft indicate a local attack vector, low attack complexity, and required pri...

CVE-2025-54115

Technical details about CVE-2025-54115 are not publicly provided in the connected documents. Based on the initial description, no product/version specifics or mitigation are given; monitor for updates.

CVE-2025-55333

CVE-2025-55333 describes an authentication bypass in Windows BitLocker caused by an incomplete factor comparison, enabling a physical attacker to bypass a security feature. The initial entry notes exploitation status as null and does not specify affected product versions beyond Windows BitLocker;...

CVE-2025-58714

CVE-2025-58714 is an elevation-of-privilege issue in the Windows Ancillary Function Driver for WinSock caused by improper access control. The description indicates an authorized attacker could locally elevate privileges. Connected Microsoft advisories (KB/OS update pages) show this CVE among Wind...

CVE-2025-59197

CVE-2025-59197 is a Windows ETL Channel vulnerability with a concrete technical detail: it arises from insertion of sensitive information into a log file, enabling an authorized attacker to disclose information locally. The connected documentation confirms this CVE is tied to the Windows ETL Chan...

CVE-2025-60709

Technical details (affected product/version, root cause, impact, exploit specifics) are not publicly provided in the given documents for CVE-2025-60709. Monitor for updates from Microsoft; no additional vulnerability specifics are available here.

CVE-2025-60720

Technical details for CVE-2025-60720 (TDX.sys) are not provided in the Connected documents. The Initial Description notes local privilege escalation via a buffer over-read; no vendor/version/patch details are supplied here; monitor for updates.

CVE-2025-62473

CVE-2025-62473 is a Windows RRAS information-disclosure vulnerability caused by a buffer over-read. It enables an unauthenticated attacker to disclose information over the network. Connected sources confirm affected component as Windows Routing and Remote Access Service (RRAS) and label the vulne...

CVE-2026-20832

CVE-2026-20832 is a Windows component vulnerability described as a Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege. Connected documents confirm the flaw affects the Windows RPC IDL handling, enabling local privilege escalation with high impact. The vulnera...

CVE-2026-20928

CVE-2026-20928 affects Windows Recovery Environment Agent. Root cause: improper removal of sensitive information before storage/transfer. Impact: allows bypass of a security feature with physical access; confidentiality is impacted. Affected product: Windows Recovery Environment Agent component. ...

CVE-2026-20937

CVE-2026-20937 affects Windows File Explorer and is described as an information-disclosure vulnerability allowing a locally authorized attacker to disclose information. The provided documents confirm a Windows File Explorer exposure, with CVSS 3.1/5.5 (Local access, Low attack complexity, High co...

CVE-2026-25171

Use-after-free in Windows at the level of Windows Authentication Methods allows an authorized attacker to elevate privileges locally. The vulnerability, CVE-2026-25171, is documented as a local privilege escalation in Windows Authentication Methods; exploitation requires the attacker to be locall...

CVE-2026-27930

CVE-2026-27930 is a Windows GDI information disclosure vulnerability. The CVSSv3.1 base score is 5.5 (Medium); attack is LOCAL, requires user interaction, and does not affect integrity or availability, but threatens confidentiality HIGH. The record notes an OFFICIAL_FIX remediation level, implyin...

CVE-2026-32081

Technical details (affected products, vulnerable components, root cause, exploits, or remediation) are not provided in the supplied documents; monitor for updates from Microsoft.

CVE-2026-32088

CVE-2026-32088 describes a security feature bypass in the Windows Biometric Service. Affected component: Windows Biometric Framework service on Windows. The underlying root cause is not explicitly detailed in the provided documents. CVSS metrics indicate an attacker with physical access can explo...

CVE-2026-32225

CVE-2026-32225 pertains to a Windows Shell security feature bypass. The entry indicates a remote-accessible vulnerability with NETWORK attack vector, requiring user interaction, and impacts confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 8.8 (HIGH) with an Offi...

CVE-2026-34349

CVE-2026-34349 describes a local information disclosure in Windows Media where sensitive data is exposed to an unauthorized actor, potentially enabling a local attacker with low privileges and no user interaction to disclose information. The report notes a CVSSv3.1 base score of 5.5 (Medium), wit...

CVE-2026-49175

CVE-2026-49175 is a Windows DNS Client vulnerability described as a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation. The issue affects the Windows DNS client and is characterized by a LOCAL attack vector with low attack complexity and the need f...

CVE-2026-50334

CVE-2026-50334 is a Windows Push Notifications/Windows Notification information disclosure vulnerability. The NVD description states an unauthorized local actor could disclose sensitive information. The CIRCL seen entries corroborate a Windows notification component issue with multiple advisories...

CVE-2026-50339

CVE-2026-50339 is a Windows Push Notifications information-disclosure vulnerability. It allows a low-privilege, local attacker with no user interaction to disclose sensitive data locally. Affected software is Windows Push Notifications; CVSS v3.1 base score 5.5 (Medium). Microsoft has released up...

CVE-2026-50362

CVE-2026-50362 is a Windows Resilient File System (ReFS) heap-based buffer overflow that allows local code execution. The issue affects the ReFS code path and, per sources, an unauthorized attacker with local access could run arbitrary code on the target system. Microsoft and corroborating source...

CVE-2026-50398

CVE-2026-50398 (Windows Media) : A race condition in concurrent execution with a shared resource allows an authorized attacker to elevate privileges over the network. The issue affects Windows Media components as described in the entry and is rated with CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2026-50404

CVE-2026-50404 affects Windows Media: a race condition in a shared resource allows local privilege escalation by an authorized user. The root cause is concurrent execution with improper synchronization. Impact is local elevation of privileges; exploitation status is not provided in the documents....

CVE-2026-50424

CVE-2026-50424 describes a denial-of-service in Windows Domain Controller caused by an untrusted pointer dereference. The vulnerability affects the Windows Domain Controller ecosystem (Active Directory Domain Services context appears in related data) and can be triggered by remote network interac...

CVE-2026-50486

CVE-2026-50486 is a Windows Runtime use-after-free vulnerability that enables a local, authenticated attacker with low privileges and no user interaction to elevate privileges. The issue is described as a Windows Runtime elevation of privileges vulnerability. Public details in connected sources i...

CVE-2026-50495

CVE-2026-50495 is a Windows DNS vulnerability described as improper access control that could allow an authorized local attacker to tamper DNS-related data. Multiple connected sources (NVD entry and MSRC update guidance) confirm this as a locally exploitable issue with a baseline CVSS v3.1 score ...

CVE-2026-58628

CVE-2026-58628 affects Windows Wireless Networking and is described as a race condition in concurrent access to a shared resource, allowing an authenticated local attacker to elevate privileges. The underlying issue is improper synchronization that leads to elevation of privileges on Windows syst...

CVE-2026-62725

CVE-2026-62725 describes a use-after-free in the Windows Telephony Service that can allow a locally authenticated user to elevate privileges. The NVD/CVE records indicate an elevated-privilege, local-execution risk with a CVSS v3.1 base score of 7.0 (high) and impact on confidentiality, integrity...

CVE-2025-48813

Technical details (affected product, versions, root cause, exploitability, fixes) for CVE-2025-48813 are not provided in the supplied connected documents. Monitor for updates from Microsoft and CVE databases to confirm scope, impact, and remediation.

CVE-2025-50152

CVE-2025-50152 is a Windows Kernel vulnerability (Out-of-bounds read) that could enable an authorized local attacker to elevate privileges. The initial record lists the CVE with a CVSS v3.1 base score of 7.8 (HIGH) and LOCAL attack vector/low complexity, with no exploitation details. Connected do...

CVE-2025-50167

CVE-2025-50167 involves a race condition in Windows Hyper-V due to improper synchronization on a shared resource, enabling an authorized local attacker to elevate privileges. The description in the Connected Documents confirms the vulnerability impact as local privilege escalation within Hyper‑V....

CVE-2025-50175

CVE-2025-50175 is a Windows Digital Media use-after-free that allows a local, authorized attacker to elevate privileges. The provided documents confirm the vulnerability name and impact (local elevation of privilege) and indicate Microsoft Windows components are involved, but they do not supply c...

CVE-2025-53151

CVE-2025-53151 is a Windows Kernel use-after-free local privilege escalation vulnerability. Connected sources indicate the affected component is the Windows Kernel and that exploitation leads to obtaining elevated privileges locally. Microsoft security updates are referenced in the surrounding ad...

CVE-2025-53716

CVE-2025-53716 is a Denial-of-Service vulnerability due to a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS). The CVE description states an authorized attacker can trigger a network-based DoS without user interaction, with attack vector NETWORK and impact Av...

CVE-2025-54105

CVE-2025-54105 describes a race condition in the Microsoft Brokering File System that can enable local privilege escalation by an authorized attacker. Connected sources confirm a Windows-focused vulnerability and indicate remediation via Microsoft hotpatches and September 2025 security updates (K...

CVE-2025-54919

CVE-2025-54919 is linked to Windows Win32K GRFX and is described as a race condition in a shared resource that could allow an authorized, local attacker to execute code. The Connected documents confirm the CVE within Windows Win32K GRFX but do not provide concrete exploit details, affected versio...

CVE-2025-55676

CVE-2025-55676 affects the Windows USB Video Class System Driver and is an information disclosure vulnerability that can be exploited locally on an authenticated system. The root cause is an error message generation that reveals sensitive information from the Windows USB Video Driver. Microsoft’s...

CVE-2025-55694

CVE-2025-55694 affects the Windows Error Reporting service. The root cause is improper access control, enabling an authenticated local attacker to elevate privileges on affected Windows systems. Public documentation confirms the issue and links to Microsoft update guidance (KB5066780 and related ...

CVE-2025-58731

CVE-2025-58731 is an Inbox COM Objects use-after-free vulnerability. The connected EUVD entry ( inbox COM Objects ) and CVE records identify the issue as enabling local code execution by an unauthenticated attacker who can trigger the use-after-free condition. Public references point to Microsoft...

CVE-2025-59193

CVE-2025-59193 describes a race condition in Windows Management Services (a Windows component) where concurrent access to a shared resource allows an authorized local attacker to elevate privileges. The description in the CVE notes local, privilege-escalation impact due to improper synchronizatio...

CVE-2025-59203

CVE-2025-59203 affects the Windows StateRepository API. The issue is described as an insertion of sensitive information into a log file, enabling local disclosure by an authenticated attacker with local access. The CVSS v3.1 base score is 5.5 (Medium) with Local attack vector and Low attack compl...

CVE-2025-59253

CVE-2025-59253 is documented with concrete details in connected sources: a local-privilege/reliance on an access-control flaw in the Windows Search Component that can enable a denial-of-service by an authorized attacker. The CVE is linked to Microsoft/security guidance entries and EUVD-2025-34274...

CVE-2025-59284

CVE-2025-59284 is Windows NTLM spoofing vulnerability with local attack vector affecting NTLM-related components. The description confirms exposure of sensitive information to an unauthorized actor, enabling spoofing locally. Connected MS advisories and listings indicate Microsoft released update...

CVE-2025-62464

CVE-2025-62464 is a Windows Projected File System Elevation of Privilege vulnerability (buffer over-read) that could allow an authorized local attacker to gain higher privileges. Affected product: Windows Projected File System (ProjFS) components; root cause described as a buffer over-read in Pro...

CVE-2026-20825

CVE-2026-20825 is a Windows Hyper-V information-disclosure vulnerability described as “improper access control” that can allow an authorized local attacker to disclose information. The CVE is rated with local attack vector, high privilege requirement, and high confidentiality impact (CVSS: 4.4, M...

CVE-2026-20935

This CVE (CVE-2026-20935) describes an information-disclosure vulnerability in Windows 11 VBS Enclave due to an untrusted pointer dereference. A local attacker could disclose data via the VBS Enclave. Affected product: Windows 11 (versions 23H2, 24H2, 25H2) with VBS Enclave. Root cause is a untru...

CVE-2026-21232

CVE-2026-21232 describes an untrusted pointer dereference in Windows HTTP.sys that enables local privilege escalation for an authorized user. Affected: Windows HTTP.sys component; root cause is a dereference of an untrusted pointer leading to elevation of privileges. Impact is high across confide...

CVE-2026-24295

CVE-2026-24295 concerns the Windows Device Association Service Elevation of Privilege. The entry indicates a LOCAL attack with LOW privileges required and NO user interaction, leading to HIGH impact on confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH). The vulne...