CVE-2026-69505

An out-of-bounds read in the Windows NTFS component allows an authorized attacker (low privileges required) to elevate privileges over a network, with user interaction required . The CVSS 3.1 score is 8.0 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No known ex...

CVE-2026-69921

CVE-2026-69921 is a heap-based buffer overflow in Windows Print Spooler Components that allows a low-privilege local attacker to elevate privileges , with no user interaction required. The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact on confidenti...

CVE-2026-83985

CVE-2026-83985 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability is rated CVSS 7.8 (HIGH) with full impact to confidentiality, integrity, and availability. Attack complexity is low, privileges required a...

CVE-2026-83990

CVE-2026-83990 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with a local attack vector, low privileges required, no user interaction, and high impact on confidenti...

CVE-2025-62217

Technical details about CVE-2025-62217 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories for affected products, impact, and remediation.

CVE-2025-62457

CVE-2025-62457 affects the Windows Cloud Files Mini Filter Driver and is described as an out-of-bounds read that enables an authorized attacker to escalate privileges locally. The connected sources corroborate this vulnerability exists in Windows components and list the Cloud Files Mini Filter Dr...

CVE-2026-25176

CVE-2026-25176 is a local elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and no user interaction. It impacts confidentiality, integrity, and availability. Exploita...

CVE-2026-70342

CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...

CVE-2026-73006

CVE-2026-73006 is a stack-based buffer overflow in DirectWrite , a component of the Microsoft Graphics Component , that allows an unauthorized remote attacker to achieve remote code execution over a network. The flaw requires user interaction (e.g., opening a crafted file) but no prior authentica...

CVE-2025-55334

CVE-2025-55334 affects the Windows Kernel and is described as a security feature bypass caused by cleartext storage of sensitive information, enabling local bypass of security protections. The connected Microsoft KBs (KB5066835 and KB5066793) document OS security updates that address this vulnera...

CVE-2025-59511

CVE-2025-59511 : External control of a file name or path in the Windows WLAN Service enables a local attacker with low privilege to escalate privileges. The NVD entry and the Dutch NCSC advisory corroborate a local-priority, high-impact privilege-escalation scenario tied to Windows WLAN Service. ...

CVE-2025-60717

CVE-2025-60717 is a use-after-free vulnerability in Windows Broadcast DVR User Service that allows an authorized user to gain elevated privileges locally. The connected sources (NVD, CVE lists, and EU/NCSc advisories) corroborate the affected component and privilege-elevation impact, with no publ...

CVE-2025-62570

CVE-2025-62570 is an information-disclosure vulnerability in Windows "Camera Frame Server Monitor." The initial description confirms improper access control allowing an authorized, local attacker to disclose information. Connected Microsoft advisories (MSRC) and NCSC/NV/KB entries indicate this C...

CVE-2026-20823

CVE-2026-20823 is a Windows File Explorer information disclosure vulnerability that could allow a local attacker to view sensitive data. The CVE is mapped to Windows components handling File Explorer data exposure; its impact is confined to local access with low complexity and low privileges requ...

CVE-2026-32217

CVE-2026-32217 affects Windows Kernel. The vulnerability arises from insertion of sensitive information into a log file, enabling an authorized, local attacker with LOW privileges to disclose information. CVSS v3.1 is provided as 5.5 MEDIUM (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Microsoft and par...

CVE-2026-72959

CVE-2026-72959 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) . An attacker with low privileges can exploit it over the network with low complexity and no user interaction to gain full compromise of the victim's machine, as reflected by the CVSS 3.1 s...

CVE-2026-80075

CVE-2026-80075 is a heap-based buffer overflow in Windows Work Folders that allows an authorized attacker to elevate privileges locally . The Microsoft-assigned CVSS 3.1 score is 7.8 (HIGH) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low complexity, low...

CVE-2026-83988

CVE-2026-83988 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 7.8 (High) with low attack complexity, low privileges required, and no user interaction, resulting in high ...

CVE-2025-59514

Technical details about CVE-2025-59514 are not provided in the supplied documents. No affected product versions, root cause, or remediation are specified here. Monitor for updates from official sources for confirmation and fixes.

CVE-2026-69316

CVE-2026-69316 is a buffer over-read vulnerability in the Windows Overlay Filter component. An authorized local attacker with low privileges can exploit it to disclose sensitive information . The attack requires high complexity and no user interaction, with a CVSS v3.1 base score of 4.7 (MEDIUM) ...

CVE-2026-69777

CVE-2026-69777 is a heap-based buffer overflow in the Windows DHCP Client that allows an authorized attacker (low privileges required) to elevate privileges over an adjacent network . The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with a vector of AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating ...

CVE-2026-70296

CVE-2026-70296 is an out-of-bounds write in the Windows Imaging Component that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. The vulnerability is rated CVSS 3.1 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating lo...

CVE-2026-73012

CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...

CVE-2026-81354

CVE-2026-81354 is a heap-based buffer overflow in Windows Hello that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 8.2 (HIGH) with a changed scope, impacting confidentiality, integrity, and availability at high levels. Attack requirements...

CVE-2025-62208

CVE-2025-62208 affects Windows License Manager. The issue involves insertion of sensitive information into a log file, enabling an authorized local attacker to disclose data. Impact is local information disclosure; CVSS from Microsoft indicates low access/privilege requirements with local access,...

CVE-2026-23672

CVE-2026-23672 corresponds to a Privilege Elevation vulnerability in the Windows Universal Disk Format File System Driver (UDFS). The NVD entry confirms an Elevation of Privilege impact with a CVSS v3.1 base score of 7.8 (Local, Privileges Required: Low, No user interaction) and indicates a Windo...

CVE-2026-58534

CVE-2026-58534 is a Windows IME heap-based buffer overflow vulnerability that enables local privilege escalation for an authenticated attacker. The affected component is the Microsoft Input Method Editor (IME) in Windows. The root cause, per the available sources, is a heap-based buffer overflow ...

CVE-2026-58637

CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...

CVE-2026-68846

CVE-2026-68846 is a use-after-free vulnerability in the Windows Kernel that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R, indicating a network-based attack requiring high complexity , low privileges , and...

CVE-2026-69366

CVE-2026-69366 is a use-after-free vulnerability in the Windows Kernel that allows an authorized attacker with low privileges to elevate privileges over a network, with user interaction required. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. No specific af...

CVE-2026-69580

A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding full impact on confidentiality, integrity, and a...

CVE-2026-69606

CVE-2026-69606 is a use-after-free vulnerability in Windows Shell that allows a local, low-privilege attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (HIGH) , with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector, high complexity, ...

CVE-2026-69623

CVE-2026-69623 is a heap-based buffer overflow in Windows HTTP Print Provider that allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.0 (HIGH) , with a network attack vector, low complexity, low privileges required, and user interaction required...

CVE-2026-70290

CVE-2026-70290 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem (Win32k) caused by the use of an uninitialized resource . An authorized local attacker with low privileges can leverage this to read sensitive kernel information, with no user interaction required. The...

CVE-2026-83940

CVE-2026-83940 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 base score is 7.0 (HIGH) with a high attack complexity , low privileges required , and high impact across confidentiality, integ...

CVE-2026-83982

CVE-2026-83982 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to perform a local privilege escalation . The vulnerability is rated HIGH (CVSS 3.1: 7.8 ) with a local attack vector, low complexity, low privileges required, and no user interactio...

CVE-2026-85877

A heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with an attack vector of Network, Low complexity, no privileges required, but user interaction is req...

CVE-2026-62694

CVE-2026-62694 is a use-after-free vulnerability in Windows Installer that allows a locally authenticated attacker with low privileges to escalate privileges . The attack requires high complexity and no user interaction , with high impact on confidentiality, integrity, and availability (CVSS 3.1:...

CVE-2026-68851

CVE-2026-68851 is a buffer over-read vulnerability in Windows NTFS that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, low privileges required, and no user interaction; impact is limited to high confiden...

CVE-2026-69293

CVE-2026-69293 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impa...

CVE-2026-69450

CVE-2026-69450 is a local privilege escalation vulnerability in Windows Error Reporting , caused by an out-of-bounds read . An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, integrity, and availability (CVSS 3.1 sc...

CVE-2026-69467

CVE-2026-69467 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, and high impact on confidentiality, integ...

CVE-2026-69501

CVE-2026-69501 is an untrusted pointer dereference in Windows Secure Kernel Mode that allows an authorized local attacker to achieve privilege escalation . The underlying cause is improper handling of a pointer in the Secure Kernel Mode component, leading to arbitrary memory access in a high-priv...

CVE-2026-69599

Windows Remote Desktop Services contains a use-after-free vulnerability that allows an authorized attacker (low privileges required) to execute code over a network. The CVSS 3.1 score is 7.5 (HIGH) , with high attack complexity and no user interaction required, impacting confidentiality, integrit...

CVE-2026-69669

CVE-2026-69669 is a heap-based buffer overflow in the Windows Kernel that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft-provided CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-reachable attack...

CVE-2026-69723

CVE-2026-69723 is an information disclosure vulnerability in the Windows Kernel . The flaw exposes sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 5.7 (MEDIUM) with high confidentiality i...

CVE-2026-69773

A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and user interaction , but ...

CVE-2026-69787

CVE-2026-69787 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to escalate privileges. The assigned CVSS 3.1 score is 7.8 (High) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and low privileges re...

CVE-2026-70572

CVE-2026-70572 is an integer overflow or wraparound vulnerability in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . The root cause lies in improper handling of integer operations within the biometric service component. The vulnerability carries a CV...

CVE-2026-78454

An out-of-bounds read in the Windows CD-ROM Driver allows a local, low-privilege attacker to achieve information disclosure . The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low complexity, and high confidentiality impact with no integrity or availability impact. CISA's SSV...